HopStation vs ReARM

HopStation is a work-in-progress PlayStation emulator written in C++, shared chiefly as a reference for emulator developers rather than as a primary way to play games. It emulates the R3000 CPU, GPU, DMA and interrupt controllers, CDROM, GTE, SPU, MDEC, and memory cards. The project provides a windowed application and a headless command-line mode, with tools including a disassembler, executable sideloading, USB controller input, configurable logging, a VRAM viewer, and ImGui introspection windows. It accepts BIN/CUE disc images, but support is buggy: CUE parsing prevents many games from loading, and inaccurate CDROM emulation also limits compatibility. The SPU lacks features such as volume sweep and dynamic ADSR. A PlayStation BIOS is required; only SCPH1001, the original US launch version, has been tested. HopStation builds for Windows, Linux, and macOS and is free under the MIT License. Some builds need additional shader libraries. The author describes it as an unfinished personal learning project and says feature contributions are unlikely to be accepted.

ReARM is a release governance platform for organizing software composition, security findings, approvals, and evidence around what ships. It versions SBOMs and XBOMs by product, component, and release, with dependency comparisons across versions and search across a portfolio. Releases can retain HBOMs, VEX, VDR, BOV, SARIF, signatures, attestations, and build metadata for 10+ years. Reliza BEAR adds supplier, copyright, and license metadata to SBOMs. ReARM gathers vulnerabilities, weaknesses, policy violations, and license violations from Dependency-Track and other tools for triage and audit. Release policies can check releases automatically and support manual or automated approvals, recording approver identity, timestamp, and an evidence snapshot in an immutable audit trail. It connects with tools including GitHub Actions, GitLab, Azure DevOps, Jenkins, Slack, Microsoft Teams, Microsoft Sentinel, and Dependency-Track. ReARM Community Edition is self-hosted under AGPL 3.0 and can store and version BOMs without Dependency-Track; vulnerability scanning and policy findings require Dependency-Track or imported VDR files. External deployments require TLS. A free plan is available; paid plans start at $195/mo, and a 60-day trial is listed.