Dependency Analytics
summary
A VS Code/Eclipse/JetBrains extension hosted on OpenShift that scans manifests and produces a stacked report: security issues (drawn from NVD), license compatibility, popularity and AI-powered companion-package recommendations. Demo shows it auditing 1,747 dependencies with 11 non-security issues and one security advisory, flags CVEs, links advisories, and suggests quick fixes (example bump 2.2.0 → 2.3.9). Current language support is JavaScript, Java, Python; available free and open source in extension marketplaces.
AI-written summary · about
chapters (10)
- 0:00Start
- 0:40Agenda
- 1:31What Problems Uh a Developer Faces during Application Development Phase
- 2:04Is My Application Secure
- 5:15Severity Distribution
- 10:36Demo
- 13:08Dependency Analytics Report
- 14:20Detailed Vulnerability Information
- 15:00Transitive Vulnerabilities
- 19:53Get the Crd Plugin
related talks
22mAI based application Insights
01h 00mDependency Check Project
27mFind and Track the hidden vulnerabilities inside your dependencies
29mFlagship Projects: Dependency-Check
20mDetect and track the aliens hiding in your dependencies
34mDependency Track
29mHunting Malicious IDE Extensions: Building Detection at Scale... (Vinod Tiwari)
24mDependency Track Fortifying The Supply Chain