Compare software

Nancy vs Dependency-Check: catalog facts
NancyDependency-Check
Free

Free and open source under the Apache 2.0 licence.

Free

The software is free under its open-source licence. Hosting, hardware and external…

Windows, Command line Windows, macOS, Linux, Command line
  • Focused on Go module dependencies
  • Easy to add to CI pipelines
  • It matches dependencies to CPE identifiers and reports the linked CVEs, and it plugs into Maven, Gradle, Jenkins…
  • Only covers Go projects
  • Relies on Sonatype's online vulnerability data
  • CPE matching produces false positives and misses, and it needs an NVD API key and a long initial…
Downloadable app Downloadable app
Open source Open source
License: Apache-2.0 License: Apache-2.0
Not stated if an account is needed Not stated if an account is needed
Needs internet Not stated if it works offline

Checked October 2, 2026

Checked September 22, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.