Tools - OWASP Dependency-Check

https://dependency-check.github.io/DependencyCheck/dependency-check-cli/

I downloaded the executable from this website

https://github.com/dependency-check/DependencyCheck/releases/tag/v12.2.2

I think this is the source code

https://github.com/dependency-check/DependencyCheck

You need an API key. You can get one from here:

https://nvd.nist.gov/developers/request-an-api-key

Markland Central, wachdorfm@hotmail.com, personal use / not listed.

Then you use commands like this

e:
cd \t\dependency-check\bin
dependency-check.bat --help

e:\t\dependency-check\bin\dependency-check.bat --purge

e:\t\dependency-check\bin\dependency-check.bat --updateonly

e:\t\dependency-check\bin\dependency-check.bat --project "Checkbook" --scan e:\d\dev\checkbook --nvdApiKey D50FD515-CD75-F111-836F-0EBF96DE670D

This command will check your project

e:\t\dependency-check\bin\dependency-check.bat --scan e:\d\dev\checkbook --project checkbook.API\Checkbook.API.csproj

This will create a file called dependency-check-report.html