Know what your software is made of.
Light Squares checks the code you depend on and the builds you ship. Both services publish records that you can verify yourself, so you do not have to take our word for anything.
Dependency Canary
Reviews of crate updates for cargo-vet
We review new versions of crates.io packages and publish the ones that pass as cargo-vet audits. You can import them into your project with two lines of configuration.
Browse the audit feedAttestable Builds
Builds that prove which source they came from
Your build runs inside an AMD SEV-SNP enclave that we cannot look into. You get back a signed record that links the binary to the exact commit it was built from, and anyone can check it.
Check a fileLight Squares is invite-only during early access. You can request access or write to us at hello@lightsquares.dev. You can read more about our work at lightsquares.dev.