
eric (Community Member) asked a question.
I think that Veracode SCA doesn't provide early warnings on end-of-life or end-of-support (EOL/EOS) dependencies. This is one more opportunity lost to reduce the pressure on our Dev teams – i.e. when they are forced to upgrade to a new major version to meet Security SLAs. For example, recommending upgrade to Spring 5 before Spring 4 EOL.
.png)
Just noticed that there's already something captured here https://community.veracode.com/s/idea/0872T000000XZynQAG/detail