Pinned Loading

1. DependencyCheck DependencyCheck Public

   OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

   Java 6.5k 1.3k

2. dependency-check/dependency-check-gradle dependency-check/dependency-check-gradle Public

   The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.

   Groovy 363 93

3. Open-Vulnerability-Project Open-Vulnerability-Project Public

   Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

   Java 126 38

4. malicious-dependencies malicious-dependencies Public

   Demonstrates how a malicious dependency could negatively impact the build output.

   Java 23 10