In wanting to produce secure code, a common requirement is to not use outdated libraries and frameworks in code bases (for example the OWASP A9 requirement).
I understand the reason to do this, but it does not seem like there is an easy way to determine whether or not all the different applications we have and support has libraries or frameworks that need to be updated (of course there is a hard way - manually looking at every single build file and looking up each of the framework's current version).
What open source mechanisms are there to show me some sort of view of the libraries I use, the version I use and the current version that is out there?
