Investigate your dependencies with Deptective

Summary: Trail of Bits released Deptective, an open-source tool that runs any Linux program, script, or command under strace in a Docker container and records failed file accesses to identify missing native dependencies. It then searches the distribution's file-to-package index, installs candidate packages in separate container snapshots, and keeps those that produce a distinct program trace, repeating until the software exits with code zero.
Bottom line: Deptective finds dependencies by observing what software actually needs at runtime rather than trusting its self-reported requirements, which matters for binaries of unknown origin and poorly packaged software whose maintainers left native dependencies unlisted.

Read the original at Trail of Bits Blog ↗