Over a two-month period, contributed to security and dependency management across two open-source projects. In AikidoSec/intel, addressed a known vulnerability by updating Jinja2 dependency version ranges, ensuring secure and compatible library usage while maintaining build stability. The work included traceable, auditable changes that improved the repository’s security posture. In wagoodman/syft, developed a .NET NuGet Dependencies Cataloger that parses packages.lock.json files to automatically identify NuGet dependencies, integrating this logic into the existing dependency scanning workflow. Leveraged Go and Python for dependency analysis, package management, and software composition analysis, with a focus on accuracy, maintainability, and risk reduction.