The dependency-check gradle plugin is a Software Composition Analysis (SCA) tool that allows projects to monitor dependent libraries for known, published vulnerabilities.
(385 stars) (102 forks) (0 个已索引 issue) (0 个开放 good first issue)
仓库
dependency-check 的仓库
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
(7,664 stars) (1,419 forks) (1 个已索引 issue) (0 个开放 good first issue)