Pinned

1. DependencyCheck DependencyCheck Public

   OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

   Java 5.9k 1.2k

2. dependency-check/ dependency-check-gradle dependency-check/dependency-check-gradle Public

   The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.

   Groovy 349 89

3. Open-Vulnerability-Project Open-Vulnerability-Project Public

   Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

   Java 94 26

4. malicious-dependencies malicious-dependencies Public

   Demonstrates how a malicious dependency could negatively impact the build output.

   Java 19 9