adobe / adobe/aem-project-archetype
Include OWASP dependency-check-maven plugin
- Dominant language
- JavaScript
- Stars
- 596
- Forks
- 431
- Avg merge
- 10d 6h
- Merged PRs (30d)
- 1
Description
### Feature Request
To serve a secure website it would be nice to benefit from the [OWASP dependency-check-maven plugin](https://github.com/jeremylong/DependencyCheck) when creating a new project. It can run on each build and developers get informed early in case of a security issue(s).
When embedding we will probably have to upgrade as well some of the dependencies within this archetype project.
Contributor guide
Research direction
No file or test is named. Start by locating the archetype's Maven build and plugin configuration, then review the OWASP dependency-check-maven documentation; done means new projects include the plugin, it runs during builds, and any required dependency upgrades are accounted for.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100