Does MetaDefender Core Detect EOS/EOL Status for Open-Source Software?

MetaDefender Core does not directly detect whether an open-source library or software package has reached EOS/EOL. This is mainly because most open-source projects do not explicitly provide EOS/EOL information. In many cases, the absence of new releases for a long period may suggest that the project is no longer actively maintained.

However, MetaDefender Core can still help address this concern. The SBOM (Software Bill of Materials) feature provides visibility into both the current package version and the latest available version.

You can use this information to:

• Compare the current version in use with the latest version available to determine how outdated it may be.
• Assess whether they are running the latest version (which reduces operational risk).
• Identify potential risks if their version is significantly behind the latest release.

This allows you to make informed decisions about whether the software they are using may pose an operational risk due to being outdated or unsupported.