DevCenter for Vulnerability Management by ecosystem

Track and fix vulnerable dependencies separately for each package ecosystem: Java (Maven and Gradle), npm, PyPI, and NuGet. Each card looks at known vulnerabilities with an available fix, and its fix action runs that ecosystem's own vulnerability remediation recipe. Copy this recipe to your own repository to drop ecosystems you don't use or rename the cards. Remove an ecosystem's check and its cards together.

Java vulnerabilities by Severity

The most severe vulnerability in the Maven and Gradle dependencies of each repository.

Critical → High → Moderate → Low → No fixable vulnerabilities · fix with DependencyVulnerabilityCheck

Java vulnerabilities by UpgradeDelta

The largest version bump needed to fix the vulnerable Maven and Gradle dependencies in each repository.

Major → Minor → Patch → No vulnerabilities · fix with DependencyVulnerabilityCheck

Java vulnerabilities by RiskScore

The highest EPSS score, the probability of exploitation in the next 30 days, in the Maven and Gradle dependencies of each repository.

Critical (>50%) → High (10-50%) → Medium (1-10%) → Low (<1%) → No vulnerability scores · fix with DependencyVulnerabilityCheck

npm vulnerabilities by Severity

The most severe vulnerability in the npm dependencies of each repository.

Critical → High → Moderate → Low → No fixable vulnerabilities · fix with DependencyVulnerabilityCheck

npm vulnerabilities by UpgradeDelta

The largest version bump needed to fix the vulnerable npm dependencies in each repository.

Major → Minor → Patch → No vulnerabilities · fix with DependencyVulnerabilityCheck

PyPI vulnerabilities by Severity

The most severe vulnerability in the PyPI dependencies of each repository.

Critical → High → Moderate → Low → No fixable vulnerabilities · fix with DependencyVulnerabilityCheck

PyPI vulnerabilities by UpgradeDelta

The largest version bump needed to fix the vulnerable PyPI dependencies in each repository.

Major → Minor → Patch → No vulnerabilities · fix with DependencyVulnerabilityCheck

NuGet vulnerabilities by Severity

The most severe vulnerability in the NuGet dependencies of each repository.

Critical → High → Moderate → Low → No fixable vulnerabilities · fix with DependencyVulnerabilityCheck

NuGet vulnerabilities by UpgradeDelta

The largest version bump needed to fix the vulnerable NuGet dependencies in each repository.

Major → Minor → Patch → No vulnerabilities · fix with DependencyVulnerabilityCheck

The DevCenter also counts lines of code per repository and committers active in the last 90 days. See the DevCenter documentation to customize.