OWASP Dependency-CheckOWASP Foundation
Open sourceOpen-source tool that identifies known-vulnerable libraries in project dependencies.
Dependency Vulnerability Scanners
Ranking methodology
In development — no version effective yet.
Decision archetype: security · Scores are category-relative (P-01) and commercial relationships never affect rank (P-04).
Tools (3)
SnykSnyk
Developer security platform that scans dependencies and code for known vulnerabilities.
TrivyAqua Security
Open sourceOpen source vulnerability scanner for containers and infrastructure-as-code files.
Some filter definitions for this category are not yet linked to a data field and are hidden until they are.