owasp-dep-scan/dep-scan

dep-scan

✅ Recently maintained

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

1,324Stars
140Forks
+57-day stars

Python · MIT · Last push 2026-10-30

Official repository & installation ↗
vulnerability-scannerscvedependency-analysisrisk-auditcontainerssbomscadependency-auditcompliancecyclonedx

GitValue · Value evidence

Unscored · Evidence coverage 0%

Provisional rubric; documentation and runtime testing are separate. Missing evidence does not imply low value.

Star history

2025-09-292026-11-03
View historical data
DateStars
2026-10-051,295
2026-10-061,295
2026-10-071,295
2026-10-081,295
2026-10-091,295
2026-10-101,295
2026-10-111,295
2026-10-121,297
2026-10-131,297
2026-10-141,298
2026-10-151,298
2026-10-161,299
2026-10-171,299
2026-10-181,299
2026-10-191,299
2026-10-201,300
2026-10-211,301
2026-10-221,301
2026-10-231,302
2026-10-241,306
2026-10-251,310
2026-10-261,317
2026-10-271,322
2026-10-281,322
2026-10-291,324
2026-10-301,324
2026-10-311,324
2026-11-011,324
2026-11-021,324
2026-11-031,324

Get the project

git clone https://github.com/owasp-dep-scan/dep-scan.git

Cloning downloads the source. For dependencies and installation, follow the project README.

Related projects & alternative candidates

Related domains do not imply feature parity. Review official documentation and licenses.