From 83572dc604405d53070a78ff8999954ca169456e Mon Sep 17 00:00:00 2001
From: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
Date: Tue, 15 Sep 2026 22:17:27 +0800
Subject: [PATCH 1/7] docs: update some links for related work
Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
---
src/site/markdown/related.md | 22 +++++++++++++---------
1 file changed, 13 insertions(+), 9 deletions(-)
diff --git a/src/site/markdown/related.md b/src/site/markdown/related.md
index 1c572775f4e..18ef5f78afd 100644
--- a/src/site/markdown/related.md
+++ b/src/site/markdown/related.md
@@ -8,23 +8,27 @@ Related FOSS Projects
------------------------
* [The Victims Project](https://github.com/victims)
* [Ruby Bundler-Audit](https://github.com/rubysec/bundler-audit)
-* [Retire.js](http://bekk.github.io/retire.js/)
-* [NPM Public Advisories](https://www.npmjs.com/advisories)
+* [Retire.js](https://retirejs.github.io/retire.js/)
+* [Trivy](https://trivy.dev/)
+* [OSV-Scanner](https://google.github.io/osv-scanner/)
Vulnerability Sources
------------------------
-The following are sources of vulnerability information. Dependency-check only uses information in the [National Vulnerability
+The following are sources of vulnerability information. Dependency-check primarily uses information in the [National Vulnerability
Database (NVD)](https://nvd.nist.gov/). The other sources listed below contain vulnerability information that may not be included in the NVD.
-* [vFeed](http://www.toolswatch.org/vfeed)
-* [Sonatype Guide OSS Index](https://www.sonatype.com/products/sonatype-guide/oss-index-users)
+* [vFeed](https://vfeed.io/)
+* [OSV](https://osv.dev/)
+* [GitHub Advisory Database](https://github.com/advisories)
+* [Sonatype Guide OSS Index](https://guide.sonatype.com/) (commercial beyond a free use tier)
Related Commercial Products
------------------------
The below list is merely informational. It is not a complete list, nor do the authors of dependency-check endorse any
of the products listed below.
-* [SRC:CLR](https://srcclr.com/)
-* [Sonatype Nexus Intelligence](https://www.sonatype.com/nexus-intelligence) and [Sonatype Nexus Lifecycle](https://www.sonatype.com/nexus-lifecycle)
-* [Palamida](http://www.palamida.com/products/enterpriseedition.html)
-* [Black Duck](https://www.blackducksoftware.com/products/black-duck-suite/code-center)
+* [Aqua Security](https://www.aquasec.com/products/software-supply-chain-security/)
+* [Black Duck](https://www.blackduck.com/software-composition-analysis-tools/black-duck-sca.html)
+* [Revenera SCA](https://www.revenera.com/software-composition-analysis/products/flexnet-code-insight)
+* [Sonatype Intelligence](https://www.sonatype.com/products/intelligence) and [Sonatype Lifecycle](https://www.sonatype.com/products/open-source-security-dependency-management)
+* [Snyk](https://snyk.io/product/open-source-security-management/)
From 36f6a1fa66094638eef1fab469b0db13ad3f02a1 Mon Sep 17 00:00:00 2001
From: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
Date: Tue, 15 Sep 2026 22:04:24 +0800
Subject: [PATCH 2/7] docs: remove unnecessary Maven project reports/info from
documentation site
As discussed at https://github.com/dependency-check/DependencyCheck/discussions/8353 these maven-generated reports no longer
serve a useful purpose, and are mainly developer-oriented rather than user oriented, so have been removed from the published sites.
A notable exception is the mechanism to generate the reports for the maven plugin; whose plugin-related subset are maintained.
Signed-off-by: Chad Wilson <29788154+chadlwilson@users.noreply.github.com>
---
.mvn/maven.config | 0
ant/src/site/site.xml | 7 +-
archetype/src/site/site.xml | 7 +-
cli/src/site/site.xml | 7 +-
core/src/site/site.xml | 11 +-
maven/pom.xml | 24 ++-
maven/src/site/markdown/configuration.md | 18 +-
maven/src/site/site.xml | 5 +-
pom.xml | 255 ++---------------------
src/main/config/version-rules.xml | 7 -
src/site/site.xml | 7 +-
utils/src/site/site.xml | 19 +-
12 files changed, 73 insertions(+), 294 deletions(-)
create mode 100644 .mvn/maven.config
delete mode 100644 src/main/config/version-rules.xml
diff --git a/.mvn/maven.config b/.mvn/maven.config
new file mode 100644
index 00000000000..e69de29bb2d
diff --git a/ant/src/site/site.xml b/ant/src/site/site.xml
index 3e61201cc30..6b789439123 100644
--- a/ant/src/site/site.xml
+++ b/ant/src/site/site.xml
@@ -1,4 +1,4 @@
-
+
-