DependencyCheck
Finds known vulnerabilities in dependencies
dependency-checkThird-party software from public repositories. bestappfor.me does not host it, does not verify it and is not responsible for its use. Download only from the official source and check the license. Terms and disclaimer
About
Dependency-Check scans the libraries your project uses and tells you whether any have publicly disclosed vulnerabilities. When it finds a match, it produces a report that links to the related CVE entries.
It matches each dependency to a CPE identifier and checks it against data from the NVD. You can run it from the command line or through Maven, Gradle, Ant and Jenkins. An NVD API key is strongly recommended, because updates are very slow without one. Java 11 or newer is required, and the license is Apache 2.0.
Highlights
- Reports known CVEs for project dependencies
- Works from CLI, Maven, Gradle, Ant and Jenkins
- Uses the NVD API; a key is recommended
Who it's for
Good for developers who want their build to flag risky libraries before the software is released.
This description was written by our editors with automated assistance, not by the developer, and has not been reviewed yet.
Why it is here
- Code changed 1 days ago
Official channels
Official channels only. We never host or repackage downloads.
