OWASP dependency-check - What is it, and how does it work?
whitesourc.com