dependency-check/dependency-check-gradle

Gradle plugin for JVM projects written in Java, Kotlin, Groovy, or Scala; and Android projects written in Java or Kotlin. Provides advice for managing dependencies and other applied plugins

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Gradle plugin to discover dependency updates

A collection of GitHub Actions to accelerate your Gradle Builds on GitHub

Gradle plugin which validates the licenses of your dependency graph match what you expect

A plugin for generating reports about the licenses of third party software using Gradle

Gradle plugin that provides a task to generate a HTML license report of your project.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

Protect against malicious open source packages 🤖