blog.versioneye.com
Identifying components by SHA values
The public VersionEye API is exposing a lot of information about open source projects. If you know the coordinates of a component (software library) in a certain package manager, you can use the Ve…