nvd topic

A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST

stevespringett

A Java library for calculating CVSSv2 and CVSSv3 scores and vectors

stevespringett

A simple Java command-line utility to mirror the CVE JSON data from NIST.

stevespringett

SBT Plugin for OWASP DependencyCheck. Monitor your dependencies and report if there are any publicly known vulnerabilities (e.g. CVEs). :rainbow:

albuch

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

DependencyTrack

Integrates Dependency-Check reports into SonarQube

dependency-check

vulnerability database spider 爬取NVD、CNVD、CNNVD等漏洞数据库

hi-KK

Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).

jenkinsci

A set of tools to work with the feeds (vulnerabilities, CPE dictionary etc.) distributed by National Vulnerability Database (NVD)

facebookincubator

Red Hat Dependency Analytics extension

fabric8-analytics