# OWASP Dependency-Check

- **Canonical URI:** https://www.vioscale.ai/software/owasp-dependency-check
- **Category:** Dependency Management
- **Homepage:** https://owasp.org/www-project-dependency-check/
- **Also known as:** owasp-dependency-check
- **Profile claimed by vendor:** no
- **Last updated:** 2026-08-26T19:17:55.166Z

## Vioscale score

**58.1 / 100**, confidence 10% (low). Computed 2026-09-01.

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| price_level | 0 | 0.052 | 0 | - |
| reliability | 0 | 0.073 | 0 | - |
| capabilities | 0 | 0.084 | 0 | - |
| repo_stars | 73.3 | 0.026 | 1.9 | ✓ |
| integrations | 0 | 0.09355555555555557 | 0 | - |
| dependent_projects | 34.8 | 0.063 | 2.2 | ✓ |
| dev_activity | 55 | 0.094 | 5.2 | ✓ |
| release_cadence | 84.4 | 0.052 | 4.4 | ✓ |
| security_posture | 0 | 0.073 | 0 | - |
| package_downloads | 0 | 0.136 | 0 | - |
| security_score | 0 | 0.042 | 0 | - |
| pricing_transparency | 0 | 0.084 | 0 | - |
| community_qa_activity | 0 | 0.063 | 0 | - |

## About

A tool that scans software dependencies to identify publicly known vulnerabilities by cross-referencing them with vulnerability databases. It generates reports that link discovered issues to relevant security advisories.

_Independently observed._

## Platform & deployment

- **Platforms:** CLI
- **Deployment:** Self-hosted

## Release history

| Version | Date | Type |
|---|---|---|
| [v13.0.0](https://github.com/dependency-check/DependencyCheck/releases/tag/v13.0.0) | 2026-08-03 | stable |
| [v12.2.2](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.2.2) | 2026-05-03 | stable |
| [v12.2.1](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.2.1) | 2026-04-11 | stable |
| [v12.2.0](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.2.0) | 2026-01-09 | stable |
| [v12.1.9](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.9) | 2025-11-11 | stable |
| [v12.1.8](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.8) | 2025-10-13 | stable |
| [v12.1.7](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.7) | 2025-10-12 | stable |
| [v12.1.6](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.6) | 2025-09-24 | stable |
| [v12.1.5](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.5) | 2025-09-20 | stable |
| [v12.1.3](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.3) | 2025-06-10 | stable |
| [v12.1.2](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.2) | 2025-06-07 | stable |
| [v12.1.1](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.1) | 2025-04-05 | stable |
| [v12.1.0](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.1.0) | 2025-02-16 | stable |
| [v12.0.2](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.0.2) | 2025-01-30 | stable |
| [v12.0.1](https://github.com/dependency-check/DependencyCheck/releases/tag/v12.0.1) | 2025-01-19 | stable |

_… and 5 earlier release(s)._

## Security & compliance


Known vulnerabilities: 2 (0 in the last 12 months), max severity HIGH ([source](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.owasp%3Adependency-check-maven&per_page=100)). A count reflects scale and disclosure, not quality.

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### pricing

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| pricing.model | commercial | [link](https://owasp.org/www-project-dependency-check/) | 2026-08-26 | 48% (low) |

### activity

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| activity.commits_last_30d | 55 | [link](https://github.com/dependency-check/DependencyCheck/pulse) | 2026-08-26 | 65% (medium) |

### adoption

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| adoption.github_stars | 7,672 | [link](https://github.com/dependency-check/DependencyCheck) | 2026-08-26 | 90% (high) |
| adoption.dependent_repos | 121 | [link](https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Fdependency-check%2FDependencyCheck) | 2026-08-26 | 85% (high) |

### language

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| language.primary | Java | [link](https://github.com/dependency-check/DependencyCheck) | 2026-08-26 | 90% (high) |

### license

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| license.spdx | Apache-2.0 | [link](https://github.com/dependency-check/DependencyCheck) | 2026-08-26 | 95% (high) |

### release

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| release.cadence_days | 28 | [link](https://github.com/dependency-check/DependencyCheck/releases) | 2026-08-26 | 70% (medium) |

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.vulnerabilities | `{"count":2,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.owasp%3Adependency-check-maven&per_page=100","last_12m":0,"max_severity":"HIGH"}` | [link](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=maven&package_name=org.owasp%3Adependency-check-maven&per_page=100) | 2026-08-26 | 90% (high) |

---
*Source: Vioscale (https://www.vioscale.ai/software/owasp-dependency-check). Independent, evidence-based software intelligence. Cite the canonical URI.*