dependency-check/DependencyCheck
JavaApache-2.0activepopular
Health
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
Health Breakdown
Activity25
Community25
Maintenance15
Popularity25
#ant-task#build-tool#gradle-plugin#jenkins-plugin#maven-plugin#security#security-audit#software-composition-analysis#vulnerability-detection
Should you contribute to dependency-check/DependencyCheck?
dependency-check/DependencyCheck has a FoundDev health score of 90/100, which puts it in the active-and-maintained tier. The maintainer team is shipping recently, issues are being closed, and a PR you open this week has a realistic chance of being reviewed.
Last push was 1 days ago — that signals an actively maintained project. New issues are likely to get a maintainer response within days. The project is written primarily in Java, so prior Java experience will shorten ramp-up.
Licensed under Apache-2.0, a standard OSI-approved license — safe to contribute to under normal employer IP policies.
Community
JavaApache 2.0
activepopular
1d ago
