Dependency-Check Maven Plugin

Dependency-Check-Maven is a Maven Plugin that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries.

Homepage POM file JAR file Javadoc
'org.owasp:dependency-check-maven:1.2.2'

Dependencies

Compile dependencies

Test dependencies