Insecure by default with OWASP DependencyCheck
... and how to fix that
A tool that helps with scanning for security vulnerabilities in dependencies can be a great addition to a CI/CD stack. Using it poorly can leave you with a false sense of security.
