Outdated dependencies

A dependency can require attention because its version is no longer supported or significantly outdated.

Fortify SCA identifies dependencies that require attention, in addition to security, license, and malware issues. Dependency version status identifies libraries that may need to be updated or replaced.

• End of life (EOL): The dependency version is no longer maintained or supported. Upgrade it as soon as possible.

• Outdated: The dependency uses an outdated version that may pose a risk. Update to the latest available version when possible.

Review dependencies regularly to reduce exposure to known issues and improve long-term maintainability.

Automation rules can notify selected recipients when a dependency is EOL. The notification identifies the affected dependency, its EOL version, and its EOL date.