feraldeps-core is an open-source tool that scans local Java projects for declared dependencies, identifies outdated versions, and detects known vulnerabilities. It features a user-friendly desktop GUI, generates comprehensive reports in HTML format, and performs many analyses locally while connecting to public APIs for the latest updates.
feraldeps-core is an open-source, local dependency and vulnerability scanner specifically designed for Java projects. It provides streamlined functionality through a desktop GUI, ensuring that the scanning and reporting processes occur locally while still allowing for updates on the latest versions and vulnerabilities via secure HTTP requests to public APIs. Supported external resources include Maven Central, OSV (Open Source Vulnerabilities), and various CVSS providers such as OSS Index, NVD, and GitHub.
feraldeps-core prioritizes user privacy. The tool scans local project files to evaluate dependency statuses without logging or transmitting user data or project metadata. It contacts external APIs for updated information only, and all sensitive API credentials remain stored locally, enhancing security during operations.
The application provides a Settings tab within the GUI for configuring optional API credentials:
java -jar /path/to/feraldeps-0.1.1.jar

Main application window.

Generated report summary view.

Visual representation of vulnerability severity scores.
feraldeps-core serves as a valuable tool for Java developers, enabling immediate analysis of project dependencies and associated vulnerabilities while ensuring security and privacy.
No comments yet.
Sign in to be the first to comment.