Nicky Ringland

Nicky helped deliver deps.dev as a public dependency-security resource and co-announced its GOSSIP health signals in 2026. The signals are already used internally at Google, including in security integrations for Antigravity, and are publicly available for maintainers and engineering teams to integrate into automated checks. This work helps teams make better-informed decisions about the external packages entering a codebase.

Nicky Ringland is a Product Manager for Open Source Security and Insights, at Google in Sydney, working on deps.dev, a public service helping developers understand the software packages relied on by projects. Through deps.dev, package relationships, security advisories and dependency-health information are made accessible to engineers building and maintaining software. Earlier academic research includes co-authored papers published in the journal Artificial Intelligence and language technology workshop proceedings.

In June 2026, Nicky co-authored the announcement of GOSSIP security and dependency-health signals in the deps.dev API. These signals highlight malicious packages, critical vulnerabilities, low usage and inactive projects, assisting teams in evaluating newly released versions. The announcement outlines both the practical uses and limits of these checks, noting that low usage warrants extra verification without necessarily indicating an unsafe package. Internally at Google, the signals support security integrations for Antigravity, while publicly offering maintainers and engineering teams automated checks for third-party code and packages suggested by AI coding tools.