Dependency-Check Core

Dependency-Check Core

dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities.

Compile beroenden (12)

Grupp / Artefakt Version Nyare Version
commons-lang » commons-lang 2.5 2.6
org.apache.commons » commons-compress 1.8 1.21
org.apache.lucene » lucene-queryparser 4.5.1 9.9.1
commons-cli » commons-cli 1.2 1.4
commons-io » commons-io 2.4 2.11.0
org.apache.lucene » lucene-analyzers-common 4.5.1 8.10.1
org.apache.lucene » lucene-core 4.5.1 9.9.1
org.jsoup » jsoup 1.7.2 1.17.1
com.h2database » h2 1.3.172 2.1.210
com.google.code.findbugs » annotations 2.0.1 3.0.1u2
org.apache.velocity » velocity-tools 2.0 NA
org.apache.velocity » velocity 1.7 NA

Provided beroenden (13)

Grupp / Artefakt Version Nyare Version
org.apache.maven.scm » maven-scm-provider-cvsexe 1.8.1 1.11.2
org.apache.axis2 » axis2-adb 1.4.1 1.7.8
com.hazelcast » hazelcast 2.5 5.3.5
net.sf.ehcache » ehcache-core 2.2.0 RELEASE
org.apache.geronimo.daytrader » daytrader-ear 2.1.7 NA
com.google.inject » guice 3.0 7.0.0
org.springframework » spring-webmvc 2.5.5 6.0.22
org.dojotoolkit » dojo-war 1.3.0 1.17.3
org.glassfish.main.admingui » war 4.0 6.2.2
org.mortbay.jetty » jetty 6.1.0 6.1.26
org.apache.struts » struts2-core 2.1.2 2.5.26
org.apache.axis2 » axis2-spring 1.4.1 1.7.8
org.apache.openjpa » openjpa 2.0.1 3.2.0

Test beroenden (2)

Grupp / Artefakt Version Nyare Version
junit » junit 4.11 4.13.2
org.apache.lucene » lucene-test-framework 4.3.1 9.9.1