JFROG LTD.

The present disclosure provides a method, system, and device for peer-to-peer downloading across a network. To illustrate, a server may receive a request from a peer device for at least a portion of a file. The server may send, to the peer device, download information including a checksum corresponding to the portion of the file, a token corresponding to authorization for the peer device to perform P2P communication, an indicator that identifies at least one device that includes the portion of the file, or a combination thereof. The server may update tracking information to indicate that the peer device received the portion of the file.

A method, system and product comprising: obtaining a list of vulnerabilities of an execution environment of a device; analyzing the execution environment to determine contextual factors of the execution environment; and adjusting the list of vulnerabilities based on the contextual factors, thereby providing a device-specific list of vulnerabilities that is configured to indicate an estimated impact of each listed vulnerability on the device, wherein said adjusting comprises at least one of: removing a first vulnerability from the list of vulnerabilities in case that exploitation of the first vulnerability is prevented in the device by the contextual factors; decreasing a score of a second vulnerability of the list of vulnerabilities in case that the contextual factors mitigate an exploitation of the second vulnerability; and increasing a score of a third vulnerability of the list of vulnerabilities in case that the contextual factors increase a risk of an exploitation of the third vulnerability.

The present disclosure provides a method, system, and device for distributing a software release. To illustrate, based on one or more files for distribution as a software release, a release bundle is generated that includes release bundle information, such as, for each file of the one or more files, a checksum, meta data, or both. One or more other aspects of the present disclosure further provide sending the release bundle to a node device. After receiving the release bundle at the node device, the node device receives and stores at least one file at a transaction directory. After verification that each of the one or more files is present/available at the node device, the one or more files may be provided to a memory of a node device and meta data included in the release bundle information may be applied to the one or more files transferred to the memory.

A method, system and product are provided including obtaining a list of vulnerabilities of an execution environment of a device, analyzing the execution environment to determine contextual factors of the execution environment, and adjusting the list of vulnerabilities based on the contextual factors. This provides a device-specific list of vulnerabilities configured to indicate an estimated impact of each listed vulnerability. Adjusting the list includes at least one of removing a first vulnerability from the list in case that exploitation of the first vulnerability is prevented in the device by the contextual factors, decreasing a score of a second vulnerability of the list in case the contextual factors mitigate an exploitation of the second vulnerability, and increasing a score of a third vulnerability of the list in case that the contextual factors increase a risk of an exploitation of the third vulnerability.

The present disclosure provides systems, methods, and computer readable storage devices for software distribution across a hierarchical network. A method includes sending, by a first node device, a registration request message to a second node device of a first distribution group of the hierarchical network. The registration request message indicates a request for the first node device to join the hierarchical network. The method further includes receiving, by the first node device, a registration response message from the second node device. The registration response message indicates an assignment of the first node device to a second distribution group corresponding to a tier that is below a tier that includes the first distribution group. The first node device may be authorized to perform peer-to-peer (P2P) communications to receive at least a portion of one or more files from node devices in the second distribution group or the second node device.

The present disclosure provides systems, methods, and computer readable storage devices for managing a federated software repository. A method includes storing, at a first member of a multi-device software repository, at least one file and metadata corresponding to the at least one file. The method includes adding an entry to an event log queue. The entry indicates addition of the at least one file. The method includes sending the metadata corresponding to the at least one file to other members of the multi-device software repository for storage at the other devices. The method includes performing, at a later time from sending the metadata, one or more repository update operations that include sending the at least one file to at least a second member of the multi-device software repository.

The present disclosure provides a method, system, and device for securely updating a software release across a network. To illustrate, a server may compile a transaction log that includes information corresponding to one or more nodes in the network to which the software release has been transmitted. The server may analyze one or more files based on vulnerability information to identify at least one file of the one or more files that poses a risk. The server may also identify at least one node of the network at which the at least one file is deployed. Based on identifying the at least one node, the server may transmit a corrective action with respect to the at least one node.

The present disclosure provides a method, system, and device for distributing a software release. To illustrate, based on one or more files for distribution as a software release, a release bundle is generated that includes release bundle information, such as, for each file of the one or more files, a checksum, meta data, or both. One or more other aspects of the present disclosure further provide sending the release bundle to a node device. After receiving the release bundle at the node device, the node device receives and stores at least one file at a transaction directory. After verification that each of the one or more files is present/available at the node device, the one or more files may be provided to a memory of a node device and meta data included in the release bundle information may be applied to the one or more files transferred to the memory.

The present disclosure provides systems, methods, and computer readable storage devices for software distribution across a hierarchical network. A method includes sending, by a first node device, a registration request message to a second node device of a first distribution group of the hierarchical network. The registration request message indicates a request for the first node device to join the hierarchical network. The method further includes receiving, by the first node device, a registration response message from the second node device. The registration response message indicates an assignment of the first node device to a second distribution group corresponding to a tier that is below a tier that includes the first distribution group. The first node device may be authorized to perform peer-to-peer (P2P) communications to receive at least a portion of one or more files from node devices in the second distribution group or the second node device.

A system and method for managing repositories may include or involve aggregating a plurality of repositories, where each repository may include data elements of a computer model, determining a state for the computer model, and fetching one or more of the data elements based on the determined state. In some embodiments, aggregated repositories may include at least two or more of: a remote repository, and a local repository—and the aggregating may include associating a single address with data elements from different repositories. In some embodiments, determining a state for the model may include comparing a stored version of the model to a reference version of the model using, e.g.: a checksum operation, a model commit, and/or a hash function. Some embodiments may include managing repositories based on a repository layout, which may describe a hierarchy between model data elements and/or aggregated repositories.