DuckStation vs ReARM

DuckStation is a free emulator for Sony PlayStation games, available for Android, Linux, macOS and Windows. Its hardware renderer supports D3D11, D3D12, OpenGL, Vulkan and Metal, with upscaling, texture filtering and 24-bit color among the graphics options. Enhancements include PGXP geometry precision, texture replacement, adaptive downsampling and post-processing shader chains. Play options include save states, rewind, runahead, CPU overclocking and multi-disc support, along with memory-card editing and save importing. DuckStation supports RetroAchievements and Discord Rich Presence. It accepts digital and analog controllers, rumble, and up to eight devices through multitap; GunCon and Justifier lightguns can be simulated with a mouse. Supported formats include bin/cue, MAME CHD, single-track ECM, MDS/MDF, CCD and unencrypted PBP. A PS1 or PS2 BIOS image is required but not supplied, and games are not provided. The maker says users should dump a BIOS from their own console. Desktop requirements include Windows 10/11 and macOS 13.3 or newer.

ReARM is a release governance platform for organizing software composition, security findings, approvals, and evidence around what ships. It versions SBOMs and XBOMs by product, component, and release, with dependency comparisons across versions and search across a portfolio. Releases can retain HBOMs, VEX, VDR, BOV, SARIF, signatures, attestations, and build metadata for 10+ years. Reliza BEAR adds supplier, copyright, and license metadata to SBOMs. ReARM gathers vulnerabilities, weaknesses, policy violations, and license violations from Dependency-Track and other tools for triage and audit. Release policies can check releases automatically and support manual or automated approvals, recording approver identity, timestamp, and an evidence snapshot in an immutable audit trail. It connects with tools including GitHub Actions, GitLab, Azure DevOps, Jenkins, Slack, Microsoft Teams, Microsoft Sentinel, and Dependency-Track. ReARM Community Edition is self-hosted under AGPL 3.0 and can store and version BOMs without Dependency-Track; vulnerability scanning and policy findings require Dependency-Track or imported VDR files. External deployments require TLS. A free plan is available; paid plans start at $195/mo, and a 60-day trial is listed.