DISCLAIMER: Plugin is a fork of https://www.npmjs.com/package/owasp-dependency-check I needed to have OWASP CLI binaries updated to newest version so I created this project.

Node.js wrapper for the OWASP depencency-check CLI tool.

npm install -D @rzepcom/owasp-dependency-check

The easiest way is to add a new NPM script to your package.json, for example:

"scripts": {
  ...
  "owasp": "owasp-dependency-check --project \"YOUR PROJECT NAME\" [options]"
}

You can specify any options which the OWASP depencency-check CLI tool provides. For example, to generate a HTML and JSON report, use:

"scripts": {
  ...
  "owasp": "owasp-dependency-check --project \"YOUR PROJECT NAME\" -f HTML JSON"
}