Arjan Jassal

Software engineer, building Mendr

About

I'm building Mendr (mendr.sh). It keeps the vulnerable dependencies across a team's GitHub repos in one queue, with due dates and owners, and opens tested fix PRs. It started with the CVE backlog at my day job.

Links

Mendr

Badges

Tastemaker

Veteran

Gone streaking

Maker History

MendrTrack, group and fix your team's CVEs before they're due
Nov 2026

🎉

Joined Product HuntDecember 4th, 2019

Forums

•

17h ago

Mendr - Track, group and fix your team's CVEs before they're due

Mendr puts the vulnerable dependencies from all your GitHub repos in one queue, grouped by package, each with an SLA due date and an owner. Press Fix and it opens a tested PR, changing your code if needed. You merge, and you keep the record for your SOC 2 audit.