over 93% were not at risk for CVE vulnerabilities. 其中，在所有存在 CVE 漏洞风险的项目中，存在一个 CVE 漏洞的占比为 18.51%，存在超 过 10 个 CVE 漏洞的占比 2.58%。 Of the projects with CVE vulnerabilities, 18.51% have one CVE vulnerability vulnerability, and 2.58% have more than 10 CVE vulnerabilities. 2.8.3 开源合规情况 Open Source Compliance Gitee 采用棱镜七彩 FossEye 扫描了 1.5 万 个 Gitee 平台上具有代表性的优质推荐开源项 目仓库，结果显示有超过 95% 不存在直接 License 冲突风险。 Gitee 旦被广泛使用，一方面漏洞信息散落在各类开发者手中，能否及时被官方收录是一个挑战；同 时另一方面，如果软件使用者跟踪漏洞修复不及时，则其被攻击的风险将大大提升。 Security risks arising from vulnerabilities in open source components are also an essential element of open source risk that cannot be

. . . . . . . . . . . . . . . . . . . . . 13 5.5.6. Run OWASP tool to identify dependency vulnerabilities (CVEs). . . . . . . . . . . . . . . . . . . . . . . 13 5.5.7. Setup eclipse project for OFBiz Run OWASP tool to identify dependency vulnerabilities (CVEs) The below command activates a gradle plugin (OWASP) and Identifies and reports known vulnerabilities (CVEs) in OFBiz library dependencies.

. . . . . . . . . . . . . . . . . . . . . 13 5.5.6. Run OWASP tool to identify dependency vulnerabilities (CVEs). . . . . . . . . . . . . . . . . . . . . . . 13 5.5.7. Setup eclipse project for OFBiz Run OWASP tool to identify dependency vulnerabilities (CVEs) The below command activates a gradle plugin (OWASP) and Identifies and reports known vulnerabilities (CVEs) in OFBiz library dependencies.