Usman

Java 21, Spring Boot, Gradle, Picocli, Maven Central, GPG/OpenPGP, SQLite, GitHub Actions

Supply-chain threat detection patterns, GPG signing infrastructure across Maven Central, false positive reduction in security tooling.

Marshal - behavioral supply-chain security for JVM dependencies. CLI + GitHub Action that scores dependency updates 0-100 on behavioral signals and blocks risky ones at PR time

Conversations about JVM dependency security, supply-chain attack patterns, and behavioral detection. Building Marshal in public and happy to talk shop