That reminds me... clj-watson 6.0.1 included an update to the latest dependency-checker-core ...we just forgot to announce the release! clj-watson can suggest a remediation for the vulnerabilities found, and can check against both the NIST National Vulnerability Database (NVD) (by default) and the GitHub Advisory Database (experimental). https://github.com/clj-holmes/clj-watson/releases/tag/v6.0.1