Files
DependencyCheck/dependency-check-cli
Will Stranathan 07e6477686 Fixed two discrepancies in the CLI options
1) Proxy port and Properties files were both using -p. Now the
properties file uses -P.
2) Nexus Proxy was defaulting to true, even if the properties said
false, so moved the check for its setting to happen after the properties
were merged and had it default to checking the properties file and
setting it to true if the properties didn't say.


Former-commit-id: 9dd50ca9af906a15143dae153b807700bb385054
2014-03-08 18:58:39 -05:00
..
2014-01-16 18:34:02 -05:00
2013-07-31 10:21:31 -04:00
2014-03-04 07:33:27 -05:00
2014-01-16 18:34:02 -05:00

Dependency-Check Command Line

Dependency-Check Command Line can be used to check project dependencies for published security vulnerabilities. The checks performed are a "best effort" and as such, there could be false positives as well as false negatives. However, vulnerabilities in 3rd party components is a well-known problem and is currently documented in the 2013 OWASP Top 10 as A9 - Using Components with Known Vulnerabilities.

Documentation and links to production binary releases can be found on the github pages.

Mailing List

Subscribe: dependency-check+subscribe@googlegroups.com

Post: dependency-check@googlegroups.com

Dependency-Check is Copyright (c) 2012-2014 Jeremy Long. All Rights Reserved.

Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the LICENSE.txt file for the full license.

Dependency-Check Command Line makes use of other open source libraries. Please see the NOTICE.txt file for more information.