mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-13 15:23:40 +01:00
26 lines
1.5 KiB
Markdown
26 lines
1.5 KiB
Markdown
Dependency-Check Ant Task
|
|
=========
|
|
|
|
Dependency-Check Ant Task can be used to check the project dependencies for published security vulnerabilities. The checks
|
|
performed are a "best effort" and as such, there could be false positives as well as false negatives. However,
|
|
vulnerabilities in 3rd party components is a well-known problem and is currently documented in the 2013 OWASP
|
|
Top 10 as [A9 - Using Components with Known Vulnerabilities](https://www.owasp.org/index.php/Top_10_2013-A9-Using_Components_with_Known_Vulnerabilities).
|
|
|
|
Documentation and links to production binary releases can be found on the [github pages](http://jeremylong.github.io/DependencyCheck/dependency-check-ant/index.html).
|
|
|
|
Mailing List
|
|
------------
|
|
|
|
Subscribe: [dependency-check+subscribe@googlegroups.com](mailto:dependency-check+subscribe@googlegroups.com)
|
|
|
|
Post: [dependency-check@googlegroups.com](mailto:dependency-check@googlegroups.com)
|
|
|
|
Copyright & License
|
|
-------------------
|
|
|
|
Dependency-Check is Copyright (c) 2012-2014 Jeremy Long. All Rights Reserved.
|
|
|
|
Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the [LICENSE.txt](https://raw.githubusercontent.com/jeremylong/DependencyCheck/master/LICENSE.txt) file for the full license.
|
|
|
|
Dependency-Check-Ant makes use of other open source libraries. Please see the [NOTICE.txt](https://raw.githubusercontent.com/jeremylong/DependencyCheck/master/dependency-check-ant/NOTICE.txt) file for more information.
|