awesome-alternatives

compare

Dependency-Check vs Grype

The same facts for both, read from GitHub every night, and the relation a person reviewed.

Dependency-CheckGrype
LanguageJavaGo
LicenceApache-2.0Apache-2.0
Stars7.7k13k
Latestv13.0.0v0.120.0
Last push2026-10-052026-10-05
Release cadenceabout 76 days between releasesabout 16 days between releases
Active contributors11 commit authors on the default branch in the last 90 days20 commit authors on the default branch in the last 90 days
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialDependency-CheckDependency scanning against the NVD, with Maven, Gradle and Ant plugins; no container image scanning.

    PartialGrypeDependency and container image scanning, from an image, a directory or an SBOM; no code or IaC scanning.