dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
License & maintenance
Apache-2.0 is a permissive license: free to use commercially with attribution.
Last code push today.