mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-14 15:53:36 +01:00
0df0073a906f71705fbc58c2dea4e6ba8251e402
Former-commit-id: 6320ac1c59644bcb83ecf171f0d00e7f96b8c7ff
About: DependencyCheck is a utility that attempts to detect publically disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries. Usage: $ mvn package $ cd target $ java -jar dependencycheck-0.1.1.jar -h $ java -jar DependencyCheck-0.1.1.jar -a Testing -out . -scan ./test-classes/org.mortbay.jetty.jar -scan struts2-core-2.1.2.jar -scan ./lib Author: Jeremy Long (jeremy.long@gmail.com) Copyright (c) 2012 Jeremy Long. All Rights Reserved.
Description
Languages
Java
75.3%
CMake
18.9%
M4
3%
Ruby
1%
Groovy
0.6%
Other
1%