Repositories

jeremylong repositories

73 supported repositories

Show repositories with indexed issues
jeremylong/juice-shop-assessmentJava

Presentation and code from OWASP AppSec DC 2019 - "Testing With Your Left Foot Forward"

Last commit Nov 3, 2020

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/lein-dependency-checkClojure

A leiningen plugin for detecting vulnerable project dependencies

Last commit Feb 16, 2022

 (1 star) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/librosaPython

Python library for audio and music analysis

Last commit May 18, 2021

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/malicious-dependenciesJava

Demonstrates how a malicious dependency could negatively impact the build output.

Last commit Aug 11, 2023

 (28 stars) (12 forks) (0 indexed issues) (0 open good first issues)
jeremylong/maven-indexerJava

Indexer for Maven Repositories

Last commit May 30, 2017

 (2 stars) (1 fork) (0 indexed issues) (0 open good first issues)
jeremylong/musical-octo-carnivalJava

A journey through the insecure defaults in GitHub Actions - wait who committed code to my repo?

Last commit Aug 17, 2023

 (2 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/nist-data-mirrorJava

A simple Java command-line utility to mirror the CVE XML and JSON data from NIST.

Last commit Oct 18, 2019

 (2 stars) (1 fork) (0 indexed issues) (0 open good first issues)
jeremylong/northpawC++

Copy of information on the Northpaw from https://sensebridge.net/projects/northpaw/instructions/

Last commit Oct 24, 2021

 (10 stars) (3 forks) (0 indexed issues) (0 open good first issues)
jeremylong/ocularGo

software asset scanning orchestration system

Last commit Jul 14, 2025

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/odc-falsepositivesPython

throw away project to test dependency-check false positives

Last commit May 27, 2024

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/open-vulnerability-cliJava

A cli that can be used to query various online vulnerability sources such as the NVD or GHSA. The CLI and docker images can be used to mirror the NVD.

Last commit Aug 9, 2026

 (175 stars) (51 forks) (0 indexed issues) (0 open good first issues)
jeremylong/open-vulnerability-clientsJava

Java library for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

Last commit Aug 16, 2026

 (18 stars) (11 forks) (0 indexed issues) (0 open good first issues)
jeremylong/ossindex-publicJava

Sonatype OSS Index - Public

Last commit Apr 27, 2022

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/ossinsightTypeScript

Open Source Software Insights - Analysis, Comparison, Trends, Rankings of Open Source Software. Follow us on Twitter: https://twitter.com/ossinsight

Last commit Sep 8, 2022

 (1 star) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/owasp-change.github.io

An Open Letter to the OWASP Board

Last commit Feb 11, 2023

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/packageurl-javaJava

Java/JVM implementation of the package url spec

Last commit Jan 10, 2019

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/phosphorJava

Phosphor: Dynamic Taint Tracking for the JVM

Last commit Oct 10, 2022

 (1 star) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/purl-spec

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

Last commit Nov 22, 2024

 (0 stars) (0 forks) (0 indexed issues) (0 open good first issues)
jeremylong/retire.jsJavaScript

scanner detecting the use of JavaScript libraries with known vulnerabilities

Last commit Jan 11, 2022

 (1 star) (0 forks) (0 indexed issues) (0 open good first issues)