Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

Main Liquibase Source

H2 is an embeddable RDBMS written in Java.

Reproducible Central: rebuild instructions for artifacts published to (Maven) Central Repository

Vulnerable app with examples showing how to not use secrets

A Maven 3.x plugin to inspect project lifecyle.

Tink is a multi-language, cross-platform, open source library that provides cryptographic APIs that are secure, easy to use correctly, and hard(er) to misuse.

Official OWASP Top 10 Document Repository

OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.

Integrating Data :: Learn how to build an application that uses Spring Integration to fetch data, process it, and write it to a file.

Spring Boot

SonarLint for Eclipse