awesome-alternatives

compare

Dependency-Check vs OSV-Scanner

The same facts for both, read from GitHub every night, and the relation a person reviewed.

Dependency-CheckOSV-Scanner
LanguageJavaGo
LicenceApache-2.0Apache-2.0
Stars7.7k11k
Latestv13.0.0v2.6.0
Last push2026-10-052026-10-05
Release cadenceabout 76 days between releasesabout 35 days between releases
Active contributors11 commit authors on the default branch in the last 90 days19 commit authors on the default branch in the last 90 days
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialDependency-CheckDependency scanning against the NVD, with Maven, Gradle and Ant plugins; no container image scanning.

    PartialOSV-ScannerDependency and container image scanning against OSV.dev, with guided remediation for npm and Maven.