Participate

The risks from unknown security vulnerabilities and quality bugs in open source code pose a problem for the open source community and for consumers of open source software.

The Java Open Review Project identifies and reports bugs and security vulnerabilities in widely used Java open source software. The project was conceived to benefit:

• The open source community.
  By finding problems before they become major issues, we help improve the open source projects we examine. Project owners get full analysis results from Fortify SCA and FindBugs and can easily review, comment and act on the findings.
• Open source consumers.
  Open source consumers can gauge the level of risk involved in different open source components.

We practice responsible disclosure. We provide a summary of our findings to anyone who wants it. We provide detailed findings to the maintainers of the code.

Stats at a Glance

Log in