Pinned Loading

1. DependencyCheck DependencyCheckPublic

   OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

   Java 6.2k 1.3k

2. dependency-check/dependency-check-gradle dependency-check/dependency-check-gradlePublic

   The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.

   Groovy 357 93

3. Open-Vulnerability-Project Open-Vulnerability-ProjectPublic

   Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

   Java 107 32

4. malicious-dependencies malicious-dependenciesPublic

   Demonstrates how a malicious dependency could negatively impact the build output.

   Java 21 9