# Install owasp-dependency-check with npm

A Node.js wrapper for the OWASP dependency-check-cli. Version 1.0.1 via npm; verified 2026-01-05.

## Install

```sh
sudo av install npm:owasp-dependency-check
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g owasp-dependency-check
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:owasp-dependency-check
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/owasp-dependency-check>
- **Version:** 1.0.1
- **Source summary:** A Node.js wrapper for the OWASP dependency-check-cli.
- **Homepage:** <https://github.com/atwupack/owasp-dependency-check>
- **Repository:** <https://github.com/atwupack/owasp-dependency-check>
- **Upstream docs:** <https://github.com/atwupack/owasp-dependency-check>
- **License:** MIT
- **Source archive:** <https://registry.npmjs.org/owasp-dependency-check/-/owasp-dependency-check-1.0.1.tgz>
- **Issue tracker:** <https://github.com/atwupack/owasp-dependency-check/issues>
- **Published:** 2026-01-05T21:48:54.481Z
- **Last updated:** 2026-01-05T21:48:54.481Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- owasp-dependency-check (cli)
- owasp-dependency-check (alias)

## Dependencies

- @commander-js/extra-typings
- ansis
- commander
- cross-spawn
- extract-zip
- purify-ts
- undici
- yup

## Build dependencies

- @eslint/js
- @rollup/plugin-terser
- @tsconfig/node20
- @types/cross-spawn
- @types/node
- @types/sinon
- c8
- eslint
- eslint-config-prettier
- eslint-plugin-prettier
- genversion
- knip
- prettier
- rimraf
- rollup
- sinon
- typescript
- typescript-eslint

## Install behavior

- Post-install hook: not defined
- Bottle: not available

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 1.0.1
- Package-manager updated: 2026-01-05
- Local data: ok
- Upstream repository: https://github.com/atwupack/owasp-dependency-check
- notice: The package-manager record has not changed recently.
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for owasp-dependency-check. Nucleus package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 1.0.1
- **Version Count:** 33
- **Maintainers:** atwupack
- **Author:** André Twupack
- **Publisher:** atwupack
- **Engines:** Node: >=20
- **Integrity:** sha512-6jUXsP8hZ7AN0P7m97ibP0R25BvkN2BvpylDOJpmIt5XvhmbyMn3V7BkvXFjBr2DI+i1QhrhncpmZpkAjInK8w==
- **Shasum:** e1ffc8f1019cc4997d76e65ac0f6293327666a3d
- **Unpacked Size:** 16,783
- **File Count:** 0
- **Created At:** 2021-01-08T16:53:41.017Z
- **Latest Published At:** 2026-01-05T21:48:54.481Z
- **Modified At:** 2026-01-05T21:48:54.692Z


## Related links

- [Language runtime packages](https://www.automicvault.com/pkg/language-runtime-packages/) - Matched curated package taxonomy and local package facts.
- [create-langgraph](https://www.automicvault.com/pkg/npm/create-langgraph/) - Local package facts share a topical domain. Shared terms: commander, commander-js, extra, extra-typings, extract.
- [env-cmd](https://www.automicvault.com/pkg/npm/env-cmd/) - Local package facts share a topical domain. Shared terms: commander, commander-js, cross, cross-spawn, extra.
- [cubejs-cli](https://www.automicvault.com/pkg/npm/cubejs-cli/) - Both packages touch the same language runtime or ecosystem. Shared terms: commander, cross, cross-spawn, extra, node.

## Sources

- Nucleus package database
- package-page enrichment
- package version freshness
- package relationship graph
- cross-ecosystem install command graph