OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

"Maven-node-grunt-gulp-npm-node-plugin to end all maven-node-grunt-gulp-npm-plugins." A Maven plugin that downloads/installs Node and NPM locally, runs NPM install, Grunt, Gulp and/or Karma.

DepClean automatically detects and removes unused dependencies in Maven projects 🔗 https://dx.doi.org/10.1007/s10664-020-09914-8)

HTTP load generator for performance testing object storage apis

a sample project with shaded dependencies. useful for testing whether SBOM and vulnerability tools detect the shaded dependencies