4 ms·
Some kind of vulnerability tracker for dependencies. You type `gradle somecommand` and it will walk the dependency graph, incl all transient ones, and show you
by sto_hristo 4y ago
Some kind of vulnerability tracker for dependencies. You type `gradle somecommand` and it will walk the dependency graph, incl all transient ones, and show you which dependencies currently have an active vulnerability affecting them and the version that fixes it.
- alanbernstein 4y agoIsn't that what dependabot does?
- minkzilla 4y agosnyk does exactly this. You can also integrate it with bitbucket so automatically make PRs with upgraded package versions.