Related FOSS Projects
===========
* [The Victims Project](https://github.com/victims)
* [Retire.js](http://bekk.github.io/retire.js/)

Vulnerability Sources
===========
The following are sources of vulnerability information. Dependency-check only uses information in the National Vulnerability
Database (NVD). The other sources listed below contain vulnerability information that may not be included in the NVD.
* [National Vulnerability Database](https://nvd.nist.gov/)
* [OSVDB](http://osvdb.org/)

Related Commercial Products
===========
The below list is merely informational. It is not a complete list, nor do the authors of dependency-check endorse any
of the products listed below.
* [Sonatype CLM](http://www.sonatype.com/clm/overview)
* [Black Duck](https://www.blackducksoftware.com/products/black-duck-suite/code-center)
* [Palamida](http://www.palamida.com/products/enterpriseedition.html)

