{"adoption": {"forks": 1419, "observed_at": "2026-08-28T04:10:02.326348+00:00", "stars": 7671}, "canonical_url": "https://ross.abutalabs.com/products/dependencycheck", "card": {"archived": false, "artifact_type": "cli-tool", "description": "OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.", "domain": ["security", "developer-tools"], "enriched": true, "function": ["security", "vulnerability-scanning", "dependency-audit", "build-tool", "cli"], "health_score": 100, "homepage": "https://owasp.org/www-project-dependency-check/", "language": "Java", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["dependency-check/DependencyCheck"], "name": "dependency-check/DependencyCheck", "platform": ["jvm", "cli", "cross-platform"], "pushed_at": "2026-08-26T10:51:49+00:00", "repo": "dependency-check/DependencyCheck", "stars": 7671, "tags": ["sca", "cve", "cpe", "nvd", "maven-plugin", "gradle-plugin", "jenkins-plugin", "owasp", "software-composition-analysis", "devops"], "topics": ["security-audit", "build-tool", "maven-plugin", "jenkins-plugin", "gradle-plugin", "vulnerability-detection", "security", "ant-task", "software-composition-analysis"], "urls": [], "use_cases": ["scan project dependencies for known CVEs", "find vulnerable libraries in a Maven build", "add dependency vulnerability checking to a Gradle build", "run software composition analysis in Jenkins CI", "generate a report of disclosed vulnerabilities in third-party components", "audit npm and Java dependencies against the NVD"], "what_it_is": "OWASP Dependency-Check is a Software Composition Analysis (SCA) tool that identifies publicly disclosed vulnerabilities (CVEs) in a project's dependencies by matching them to CPE identifiers using the NVD API and other data sources. It ships as a CLI, Maven plugin, Gradle plugin, Ant task, and CI integrations like Jenkins and GitHub Actions.", "when_to_avoid": ["you need real-time SBOM analysis across many ecosystems with commercial support", "you cannot obtain or manage an NVD API key", "you need language ecosystems better served by dedicated tools like npm audit or Bundler Audit alone"], "when_to_choose": ["you need OWASP Top 10 'known vulnerable components' checks in JVM builds", "you want a mature, free SCA tool with Maven/Gradle/CLI/CI integrations", "you need CVE reports linked to NVD data"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/dependencycheck", "repo": "dependency-check/DependencyCheck", "role": "main", "score": 98}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:10:02.326348+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T17:36:03.527364+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "258c0e2bc163e6804ec8871d9fe999881a1cfc58d468f700a0097bb3ab0da3a3", "fetched_at": "2026-08-28T04:10:02.326348+00:00", "kind": "readme", "missing": false, "url": "https://github.com/dependency-check/DependencyCheck"}, {"content_hash": "0d5858e74a61d5ae24de6643b6943c0749b79cfc8d898332183aa181fa80f2f2", "fetched_at": "2026-08-29T08:31:40.382378+00:00", "kind": "homepage", "missing": false, "url": "https://owasp.org/www-project-dependency-check/"}, {"content_hash": "b21a48297b2dfd11edd59c3260c39b8f6b66d133bc13ef23c0a1b56af49ff526", "fetched_at": "2026-08-29T08:31:40.392082+00:00", "kind": "site_page", "missing": false, "url": "https://owasp.org/about"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 96}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 5112, "days_push": 7, "days_rel": 30, "gap_med": 24.5, "n_releases_24m": 19}, "score": 98, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}