dependency-check/DependencyCheck

View on GitHub

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Stars: 7.7k
Forks: 1.4k
Open beginner issues: 0
Indexed issues: 184
Avg merge: 9d 22h
Merged PRs (30d): 13

Dominant language: Java
License: Apache-2.0
Last GitHub push: Sep 12, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Open All

184 open issues indexed

autoconf analyzer Open

enhancement question

dependency-check/DependencyCheck#2474 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Option to rename outputfiles:dependency-check-report Open

enhancement

dependency-check/DependencyCheck#2634 · 6 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
add a documentation guide to fix false positive reports Open

documentation enhancement

dependency-check/DependencyCheck#2803 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Improve exception handling in general Open

enhancement

dependency-check/DependencyCheck#2933 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Feedback from OSSF: Can we discuss reconsidering a feature like PR 298 Open

enhancement

dependency-check/DependencyCheck#2958 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Create separate classpath for dependency check execution Open

enhancement

dependency-check/DependencyCheck#3010 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Add a flag to allow user bypass `npm install` check for node.js codes Open

enhancement

dependency-check/DependencyCheck#3013 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Improve test coverage for Go modules Open

enhancement

dependency-check/DependencyCheck#3070 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Please add the option for specifiying Node Audit credentials Open

enhancement

dependency-check/DependencyCheck#3076 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
NodeAuditSearch fails with skipped dependency Open

bug

dependency-check/DependencyCheck#3097 · 3 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Improve Error Handling Open

enhancement

dependency-check/DependencyCheck#3122 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
ArchiveAnalyzer does not extract package.json inside node_modules which are used by NodePackageAnalyzer Open

npm

dependency-check/DependencyCheck#3171 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CSV file has not all the Dependencies Scanned while HTML file has Open

bug

dependency-check/DependencyCheck#3174 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
'How to' Documentation missing from File Type Analyzer Descriptions Open

documentation enhancement

dependency-check/DependencyCheck#3239 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support for bash strict mode Open

enhancement

dependency-check/DependencyCheck#3287 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
golang: checker doesn't take into account replace directives Open

bug

dependency-check/DependencyCheck#3309 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add a configuration option for download retry attempts Open

enhancement

dependency-check/DependencyCheck#3426 · 3 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
Improved database upgrade experience Open

enhancement

dependency-check/DependencyCheck#3436 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Configurable Log Levels Open

enhancement

dependency-check/DependencyCheck#3458 · 3 comments · 7 reactions · 0 assignees · Indexed Sep 15, 2026
Resolving alias packages in node.js Open

enhancement

dependency-check/DependencyCheck#3482 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Add Output Format CycloneDX for integration with Dependency-Track Open

enhancement

dependency-check/DependencyCheck#3490 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Need more detailed reason for error "Unable to create temp directory" Open

bug

dependency-check/DependencyCheck#3495 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
keep the npm dependencies flag 'Dev' Open

enhancement

dependency-check/DependencyCheck#3559 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False Positive on jenkins.war: LTS versions Open

enhancement FP Report

dependency-check/DependencyCheck#3581 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add authentification for retireJS mirror Open

enhancement

dependency-check/DependencyCheck#3603 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Severity missing in csv report file (only CVSSv3_BaseSeverity is present) Open

enhancement

dependency-check/DependencyCheck#3617 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support for Conan Package Manager? Open

enhancement

dependency-check/DependencyCheck#3773 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
False negative for google protobuf nuget package or .NET DLL Open

bug

dependency-check/DependencyCheck#3846 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Option to skip low confidence and/or low severity checks Open

enhancement

dependency-check/DependencyCheck#4018 · 4 comments · 14 reactions · 0 assignees · Indexed Sep 15, 2026
How are compile dependencies handled in dependency management? Open

bug maven

dependency-check/DependencyCheck#4036 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Golang: Go mod bails on vendor directory Open

dependency-check/DependencyCheck#4101 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Update False Positive IssueOps to support non-CVE vulnerabilities Open

enhancement

dependency-check/DependencyCheck#4105 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Use github advisories as a source instead of NVD Open

enhancement

dependency-check/DependencyCheck#4130 · 4 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
ArtifactResolverException when no jar found in a pom project. Open

bug

dependency-check/DependencyCheck#4134 · 2 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Add a Caching Analyzer Proxy Open

enhancement

dependency-check/DependencyCheck#4150 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
The excludes parameter does not work with dependency-check-maven from CLI Open

enhancement maven

dependency-check/DependencyCheck#4172 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Retry an analyser which returns an error Open

enhancement

dependency-check/DependencyCheck#4242 · 0 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
No Username and Password settings for the custom retireJsUrl triggers a 401 Error Open

enhancement

dependency-check/DependencyCheck#4477 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
RetireJS: Allow to exclude based on library name and version Open

enhancement

dependency-check/DependencyCheck#4478 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
SARIF "ruleId" for NPM findings is just a number; should be NPM- prefixed Open

enhancement

dependency-check/DependencyCheck#4515 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
filePath does not work for findings in WAR files during release builds Open

bug

dependency-check/DependencyCheck#4636 · 16 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
DependencyCheck fails to invoke bundle audit correctly in zip archive Open

bug

dependency-check/DependencyCheck#4659 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 15, 2026
Detect outdated JavaScript libraries on a CDN Open

enhancement

dependency-check/DependencyCheck#4711 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Suppression of specific CVE based on CVSS value Open

enhancement

dependency-check/DependencyCheck#4838 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Add Exploit Prediction Scoring System (EPSS) data Open

enhancement

dependency-check/DependencyCheck#4896 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 15, 2026
Configurable timeout and retry for the writelock and improve logging Open

enhancement

dependency-check/DependencyCheck#4910 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Fetching suppression file through Git Open

enhancement

dependency-check/DependencyCheck#4917 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Execution using Remote project-suppression should fail with 404 Open

enhancement

dependency-check/DependencyCheck#4938 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Request to make full url from pom Open

enhancement question

dependency-check/DependencyCheck#4960 · 11 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
OssIndex connection status Open

enhancement

dependency-check/DependencyCheck#4968 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026

dependency-check/DependencyCheck

Get new issues in your inbox