Pinned

1. sonatype-nexus-community/nancy sonatype-nexus-community/nancy Public

   A tool to check for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index

   Go 545 76

2. sonatype-nexus-community/auditjs sonatype-nexus-community/auditjs Public

   Audits an NPM package.json file to identify known vulnerabilities.

   TypeScript 220 53

3. sonatype-nexus-community/ahab sonatype-nexus-community/ahab Public

   ahab is a tool to check for vulnerabilities in your apt, apk, or yum powered operating systems, powered by Sonatype OSS Index.

   Go 65 17

4. sonatype-nexus-community/scan-gradle-plugin sonatype-nexus-community/scan-gradle-plugin Public

   Gradle plugin that scans the dependencies of a Gradle project using Sonatype platforms: OSS Index and Nexus IQ Server.

   Java 69 21

5. sonatype-nexus-community/jake sonatype-nexus-community/jake Public

   Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

   Python 101 24

6. sonatype-nexus-community/cyclonedx-sbom-examples sonatype-nexus-community/cyclonedx-sbom-examples Public

   This repo has example CycloneDx xml formatted SBOMs for popular components across multiple ecosystems. Also, instructions for building and generating the sboms in the readme. If you add or update c…

   Java 6 7