Scanner for vulnerable JavaScript libraries
OWASP Dependency-Check
Identify known vulnerabilities in project dependencies
About OWASP Dependency-Check
OWASP Dependency-Check is a software composition analysis tool that identifies project dependencies and checks them against known vulnerabilities. Running your own instance means the features, storage limits, and upgrade schedule are yours to choose rather than a vendor's roadmap. Regular community releases, public issue trackers, and extensive documentation help new administrators get from a first install to daily use quickly.
OWASP Dependency-Check key facts
- Category: Developer Tools
- Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
- Focus areas: dependencies, vulnerabilities, sca, owasp
- Official site: owasp.org
About the Developer Tools category
Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside OWASP Dependency-Check, it includes Retire.js, OWASP Dependency-Track, Renovate, Eraser.
More in Developer Tools
Comparing tools in the Developer Tools category? These related listings are worth a look: Retire.js — Scanner for vulnerable JavaScript libraries; OWASP Dependency-Track — Software composition analysis with SBOM support; Renovate — Automated dependency updates across repositories.
Software composition analysis with SBOM support
Automated dependency updates across repositories
Helps engineering teams draw architecture diagrams and write technical documents together.
Lets developers deploy web apps.
Helps platform teams deploy applications on their own AWS accounts with.