Dependency-Check Maven Plugin

dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.

License

License

Categories

Categories

Maven Build Tools
GroupId

GroupId

org.owasp
ArtifactId

ArtifactId

dependency-check-maven
Last Version

Last Version

7.1.1
Release Date

Release Date

Type

Type

maven-plugin
Description

Description

Dependency-Check Maven Plugin
dependency-check-maven is a Maven Plugin that uses dependency-check-core to detect publicly disclosed vulnerabilities associated with the project's dependencies. The plugin will generate a report listing the dependency, any identified Common Platform Enumeration (CPE) identifiers, and the associated Common Vulnerability and Exposure (CVE) entries.
Project Organization

Project Organization

OWASP
Source Code Management

Source Code Management

https://github.com/jeremylong/DependencyCheck/tree/master/maven

Download dependency-check-maven

How to add to project

<plugin>
    <groupId>org.owasp</groupId>
    <artifactId>dependency-check-maven</artifactId>
    <version>7.1.1</version>
</plugin>

Dependencies

compile (10)

Group / Artifact Type Version
org.owasp : dependency-check-core jar 7.1.1
org.owasp : dependency-check-utils jar 7.1.1
org.apache.maven.shared : file-management jar 3.0.0
org.codehaus.plexus : plexus-utils jar 3.4.2
org.apache.maven.reporting : maven-reporting-api jar 3.1.0
org.sonatype.plexus : plexus-sec-dispatcher jar 1.4
org.apache.maven.shared : maven-dependency-tree jar 3.1.1
org.apache.maven.shared : maven-artifact-transfer jar 0.13.1
org.jetbrains : annotations Optional jar 23.0.0
com.github.spotbugs : spotbugs-annotations Optional jar 4.7.0

provided (8)

Group / Artifact Type Version
org.apache.maven : maven-plugin-api jar 3.1.0
org.apache.maven : maven-settings jar 3.1.0
org.apache.maven : maven-core jar 3.1.0
org.apache.maven.plugin-tools : maven-plugin-annotations jar 3.6.4
org.apache.maven : maven-model jar 3.1.0
org.apache.maven : maven-artifact jar 3.1.0
org.apache.maven : maven-model-builder jar 3.1.0
org.apache.maven : maven-compat jar 3.8.5

test (4)

Group / Artifact Type Version
org.apache.maven.plugin-testing : maven-plugin-testing-harness jar 3.3.0
junit : junit jar 4.13.2
org.hamcrest : hamcrest-core jar 2.2
org.jmockit : jmockit jar 1.49

Project Modules

There are no modules declared in this project.

Versions

Version
7.1.1
7.1.0
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.5.3
6.5.2
6.5.1
6.5.0
6.4.1
6.4.0
6.3.2
6.3.1
6.3.0
6.2.2
6.2.1
6.2.0
6.1.6
6.1.5
6.1.4
6.1.3
6.1.2
6.1.1
6.1.0
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.3.2
5.3.1
5.3.0
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.1.1
5.1.0
5.0.0
5.0.0-M3
5.0.0-M2
5.0.0-M1
4.0.2
4.0.1
4.0.0
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.2.1
3.2.0
3.1.2
3.1.1
3.1.0
3.0.2
3.0.1
3.0.0
2.1.1
2.1.0
2.0.1
2.0.0
1.4.5
1.4.4.1
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.6
1.3.5.1
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.11
1.2.10
1.2.9
1.2.8
1.2.7
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0