HEIDI: Free IDE security plugin for open-source vulnerability checks Open-source dependencies make up a large percentage of the code in production applications, and most vulnerability checks still run late in the pipeline, inside CI/CD systems or after a release ships. Meterian is moving those checks earlier with HEIDI, a free plugin for Visual Studio Code and JetBrains IDEs that flags vulnerable packages and offers one-click upgrades from inside the editor. HEIDI is also distributed through the OpenVSX registry and has recorded close to 5,000 installs in its first month on the Visual Studio Code Marketplace. It supports Java, .NET, Node.js, Python, PHP, Ruby, Rust, and Go, and scans only manifest files, leaving source code on the developer’s machine. Real-time data versus stale model…