Related Work
========================
The following is a list of related projects, databases, and commercial projects. If your solution
or database is not listed and you would like it to be listed here, feel free to contact us or send in
a pull request.

Related FOSS Projects
------------------------
* [The Victims Project](https://github.com/victims)
* [Ruby Bundler-Audit](https://github.com/rubysec/bundler-audit)
* [Retire.js](http://bekk.github.io/retire.js/)
* [NPM Public Advisories](https://www.npmjs.com/advisories)

Vulnerability Sources
------------------------
The following are sources of vulnerability information. Dependency-check only uses information in the National Vulnerability
Database (NVD). The other sources listed below contain vulnerability information that may not be included in the NVD.

* [vFeed](http://www.toolswatch.org/vfeed)
* [OSVDB](http://osvdb.org/)
* [National Vulnerability Database](https://nvd.nist.gov/)
* [Sonatype OSS Index](https://ossindex.sonatype.org/)

Related Commercial Products
------------------------
The below list is merely informational. It is not a complete list, nor do the authors of dependency-check endorse any
of the products listed below.

* [SRC:CLR](https://srcclr.com/)
* [Sonatype Nexus Intelligence](https://www.sonatype.com/nexus-intelligence) and [Sonatype Nexus Lifecycle](https://www.sonatype.com/nexus-lifecycle)
* [Palamida](http://www.palamida.com/products/enterpriseedition.html)
* [Black Duck](https://www.blackducksoftware.com/products/black-duck-suite/code-center)
