mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-01-13 23:33:37 +01:00
dbc10e53e4549dba06e6497bf741baee8567d9e8
About: DependencyCheck is a simple utility that attempts to determine if there is a Common Product Enumeration (CPE) identifier for a given project dependency. If found, it will generate a report linking to the associated CVE entries. Usage: Still under development: mvn package site java -jar dependencycheck-0.1.jar -h TODO: Add CVE download/indexing and CPE lookup. Finish report generation (xml). Consider utilizing the OSVDB in addition to CPE/CVE. Author: Jeremy Long (jeremy.long@gmail.com) Copyright (c) 2012 Jeremy Long. All Rights Reserved.
Description
Languages
Java
75.3%
CMake
18.9%
M4
3%
Ruby
1%
Groovy
0.6%
Other
1%