npm provides two useful commands for detecting outdated libraries:
- npm outdated checks your
package.json/package-lock.jsonfor outdated libraries - npm audit runs a security audit; it only reports libraries with known vulnerabilities
Is there something equivalent in Maven for Java?
Notes:
- According to this questions, Gradle does not support the
npm outdated-functionality out-of-the-box, but there is the Grade Versions Plugin. Perhaps the equivalent Versions Maven Plugin could be used to used to providenpm outdated-like functionality, but I did not see that it can warn about security issues. - I am aware of solutions to integrate vulnerability scanning of the code in the CI systems, but I am looking for a simple mechanism like
npmprovides that does not require a lot of setup.