-
@mattdsteele versioneye.com/ supports Maven. i haven't seen it installed though. would love to see it in action for a review
-
Definitely looks like @VersionEye and @greenkeeperio would be great tools to help
-
and jeremylong.github.io/DependencyCheck/ gives a nice report of vulnerable dependencies too -- /ht @snekse