{"adoption": {"forks": 138, "observed_at": "2026-08-28T04:04:13.800804+00:00", "stars": 1281}, "canonical_url": "https://ross.abutalabs.com/products/dep-scan", "card": {"archived": false, "artifact_type": "cli-tool", "description": "OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.", "domain": ["security", "developer-tools"], "enriched": true, "function": ["vulnerability-scanning", "dependency-audit", "security", "developer-tools", "ci-cd"], "health_score": 99, "homepage": "https://depscan.readthedocs.io", "language": "Python", "license": "MIT", "license_family": "permissive", "maturity": "active", "member_repos": ["owasp-dep-scan/dep-scan"], "name": "owasp-dep-scan/dep-scan", "platform": ["windows", "cli", "python"], "pushed_at": "2026-08-16T22:39:52+00:00", "repo": "owasp-dep-scan/dep-scan", "stars": 1281, "tags": ["sbom", "sca", "vex", "cyclonedx", "supply-chain-security", "reachability-analysis", "container-scanning", "owasp", "devops", "linux", "macos", "docker"], "topics": ["vulnerability-scanners", "cve", "dependency-analysis", "risk-audit", "containers", "sbom", "sca", "dependency-audit", "compliance", "cyclonedx", "devsecops", "security-audit", "security-tools", "vex", "reachability-analysis", "supply-chain-security"], "urls": [], "use_cases": ["scan project dependencies for known cves", "audit container images for vulnerabilities", "generate sbom with vulnerability disclosure report", "perform reachability analysis on vulnerable packages", "detect dependency confusion attacks", "integrate dependency scanning into ci pipeline", "generate vex documents for compliance"], "what_it_is": "OWASP dep-scan is a security and risk audit CLI tool that scans project dependencies in local repositories and container images for known CVEs, license issues, and maintenance risks. It performs reachability analysis across multiple language ecosystems and generates SBOM, VDR, and VEX reports for CI integration.", "when_to_avoid": ["you need dynamic application security testing or runtime protection", "you want a hosted SaaS vulnerability management platform with dashboards", "you only need license compliance without vulnerability data"], "when_to_choose": ["you need local, fast dependency vulnerability scanning without a server", "you want SBOM/VEX/VDR generation for compliance", "you need reachability analysis to prioritize real exploitable vulnerabilities", "you scan multiple ecosystems including containers and Linux distro packages"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/dep-scan", "repo": "owasp-dep-scan/dep-scan", "role": "main", "score": 97}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:13.800804+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T05:02:33.356143+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "eb6a0c5921719630481c9adce63e2d5f8c1bc84ca6adf4fccb014d032beb0ba9", "fetched_at": "2026-08-28T04:04:13.800804+00:00", "kind": "readme", "missing": false, "url": "https://github.com/owasp-dep-scan/dep-scan"}, {"content_hash": "4c3055ca69ba5efead813cfa6e6ecc00d4703eaf659233a63812bd820cf35120", "fetched_at": "2026-08-29T12:13:07.978555+00:00", "kind": "homepage", "missing": false, "url": "https://depscan.readthedocs.io"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 98, "longevity": 100, "rhythm": 94}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2409, "days_push": 17, "days_rel": 41, "gap_med": 23, "n_releases_24m": 10}, "score": 97, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}