Dependency-Check vs lgtm.com
A side-by-side look at Dependency-Check and lgtm.com. For an in-depth review of either product, follow the links below.
Dependency-Check
Development
Dependency-Check is an open source software composition analysis tool that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. It supports Java, .NET, Python, Ruby, Node.js, and other languages.
securityvulnerability-scanningopen-sourcedependency-analysis
lgtm.com
Development
LGTM.com is a continuous code analysis platform that helps developers detect bugs and vulnerabilities in source code with automated code reviews. It integrates directly with GitHub, GitLab, and Bitbucket, and runs code checks continuously in the background to find issues as new commits are added.
securitycode-reviewstatic-analysis
Related Comparisons
OpenVAS
Coverity Scan
PVS-Studio
Clang Static Analyzer
cvechecker