An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container …