Steve Poole
384 viewsYour AI Assistant Is Choosing Your Dependencies
AI code generation doesn't just write your Java. It picks your suppliers, edits your build and pulls in ecosystems you don't know. What …
Gold Sponsor
HeroDevs
Never-Ending Support for End-of-Life Open Source
16Articles
2Podcasts
2Authors
About HeroDevs
HeroDevs is the trusted leader in providing secure, never-ending support for deprecated open source software. The company’s mission is to keep critical technologies running smoothly, securely, and in compliance long after their official end-of-life. From AngularJS to .NET, HeroDevs’ Never-Ending Support (NES) solutions give businesses the freedom to plan migrations on their own terms while staying protected against vulnerabilities and compliance risks. Serving industries where security and uptime are non-negotiable, including finance, healthcare, and government, HeroDevs has earned the trust of more than 900 companies, including nearly half of the Fortune 100.
Read the documentation or see open roles at HeroDevs.
Topics covered
Articles from HeroDevs
RSS feedSteve Poole
384 views
Steve Poole
645 viewsAI Found the Bugs. Who's Patching Your EOL Java Code?
AI finds decades-old flaws at machine speed, but the fixes only reach supported versions. What that means for end-of-life Java, and what to …
503 viewsFoojay Podcast #100: Java Podcasters on Why They Started, What Broke, and What They Learned
Foojay Podcast hits episode 100. No plan, no roadmap. It just happened. To mark the occasion, Frank turned the microphone around and invited …
Steve Poole
1,818 views7 Jackson CVEs in One Day: AI-Assisted Security Research
Seven jackson-databind vulnerabilities, one researcher, one day. Two critical RCEs. This is AI-assisted security research in practice.
Steve Poole
1,233 viewsDid AI Just Break Software Security For Ever?
AI finds exploits in hours. Patch cycles run 30–60 days. EOL software gets neither. Here's what changed in 2026 and what to do about it.
Steve Poole
2,195 viewsSpring Boot 3.5 Migration and the CRA: When Good Enough Isn't"
Spring Boot 3.5 reaches EOL on June 30. The legal context is about to change. Here's what 'without undue delay' means when commercial …
919 viewsFoojay Podcast #95: Is Your Java App Actually Secure, Or Does It Just Look That Way?
Is your Java application actually secure, or does it just look that way? In this episode of the Foojay Podcast, Frank is joined by Steve …
Steve Poole
3,515 viewsSpring Boot 3.5 EOL — The CVE Blind Spot Nobody Talks About
Spring Boot 3.5 goes EOL June 30, 2026. But the real risk isn't the migration. It's what happens to CVE reporting once a project reaches end …
Steve Poole
1,460 viewsSpring I/O 2026: Field Notes from Barcelona
Three days at Spring I/O 2026 in Barcelona. Agents, Embabel, the sessions that didn't get the main stage, and a booth full of dragons
Steve Poole
2,136 viewsWhy Java Developers Over-Trust AI-Generated Code
AI coding tools sound confident even when they're wrong. Here's the psychology behind why Java developers accept bad suggestions — and …
Want your company featured here?
Reach hundreds of thousands of Java developers every day through sponsored content, podcasts and events.