Showing exactly how the code within the SDK has been written is the best way to reassure developers and partners that there are no hidden functions or unwanted features.
<a target="_blank" href="http://www.sonatype.com/">Sonatype</a> has updated its technology to protect software developers from using rogue open-source components that could be used to attack any kind