Pinned Repositories
cyclonedx-go
Go library to consume and produce CycloneDX Software Bill of Materials (SBOM)
cyclonedx-gomod
Creates CycloneDX Software Bill of Materials (SBOM) from Go modules
dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
hyades
Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.
bradamsa-ng
Burp Suite extension for Radamsa-powered fuzzing with Intruder
dtapac
Audit Dependency-Track findings and policy violations via policy as code
faraday-docker
Docker & Docker Compose setup for FaradaySEC
fdnssearch
Swiftly search FDNS datasets from Rapid7 Open Data
traefik-plugin-geoblock
traefik plugin to whitelist requests based on geolocation
versatile
Java implementation of vers, a mostly universal version range specifier
nscuro's Repositories
nscuro/traefik-plugin-geoblock
traefik plugin to whitelist requests based on geolocation
nscuro/dtapac
Audit Dependency-Track findings and policy violations via policy as code
nscuro/fdnssearch
Swiftly search FDNS datasets from Rapid7 Open Data
nscuro/dtrack-client
Unofficial Go client library for OWASP Dependency-Track
nscuro/versatile
Java implementation of vers, a mostly universal version range specifier
nscuro/cdx-central
CLI utility to download public CycloneDX SBOMs from Maven Central
nscuro/CPE-Parser
A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST
nscuro/dependency-track
Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.
nscuro/Alpine
An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies
nscuro/cvss-calculator
A Java library for calculating CVSSv2, CVSSv3, and CVSSv4 scores and vectors
nscuro/cyclonedx-cli
CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.
nscuro/cyclonedx-core-java
CycloneDX SBOM Model and Utils for Creating and Validating BOMs
nscuro/datanucleus-cache-caffeine
DataNucleus plugin for Caffeine Cache
nscuro/datanucleus-core
DataNucleus core persistence support - the basis for anything in DataNucleus
nscuro/datanucleus-postgresql
DataNucleus plugin for PostgreSQL-specific functionality
nscuro/datanucleus-rdbms
DataNucleus support for persistence to RDBMS Datastores
nscuro/datanucleus-test-jdo
Template test for demonstrating issues with DataNucleus using the JDO API
nscuro/dependency-track-frontend
Frontend UI for Dependency-Track
nscuro/dtbench
nscuro/dtdiff
nscuro/gotalias
Got alias?
nscuro/hyades
Proof-of-concept for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services, based on Apache Kafka.
nscuro/micrometer
An application observability facade for the most popular observability tools. Think SLF4J, but for observability.
nscuro/Open-Vulnerability-Project
Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)
nscuro/ossindex-client
Unofficial Go client for Sonatype OSS Index
nscuro/owasp-change.github.io
An Open Letter to the OWASP Board
nscuro/parallel-consumer
Parallel Apache Kafka client wrapper with per message ACK, client side queueing, a simpler consumer/producer API with key concurrency and extendable non-blocking IO processing.
nscuro/quarkus
Quarkus: Supersonic Subatomic Java.
nscuro/quarkus-native-protobuf
nscuro/smithy
Security scanning orchestration and results enrichment framework -- forked and rewritten from @thought-machine/dracon