The safeguards map / 1.1 Code and dependencies
Eclipse Steady
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A tool that analyzes Java applications to detect dependencies on open-source components with known vulnerabilities and to support developers in mitigating them.
Where it sits
1.1 Code and dependencies (primary): Analyzes a Java application's dependencies to detect open-source components with known vulnerabilities, so developers can decide how to mitigate them.
detect whether they depend on open-source components with known vulnerabilities
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make it
- Runs
- by hand
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
The README also describes an optional dynamic analysis that collects evidence of vulnerable code executing; only the dependency detection is placed here.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.