We are using Fossa for spring boot applications and for angular UI applications. We are using maven dependencies for the spring boot applications , Fossa scans our spring boot application after running through the pipeline since we have integrated security tools in our tekton pipeline. Fossa identifies all the libraries and dependencies from our gardle and maven. It will show issues, security , quality of the libraries along with the severity and also recommends the fixes for the vulnerabilities. But sometimes fix won't show immediately.

The product is effective and efficient and it has aspects that enable automated scans of emails and licenses which are quite amazing. The product is also easy and simple to use and also integrates quite easily with other applications which awesome.

This product is easy and simple to use and integrates very well with other applications like Gitlab. I like how effective and efficient with multiple build systems and its vulnerability. Another aspect is the automated scans of emails and licences which are quite amazing.