Skip to content

v0.1.0

Choose a tag to compare

@bomly-guy bomly-guy released this 13 Aug 07:21
· 5 commits to main since this release

Initial release of the jvmreach reachability analyzer as a standalone Bomly plugin. It discovers Maven, Gradle, and sbt modules, scans Java, Kotlin, and Scala sources for imports, and annotates Bomly's vulnerability findings with package-tier reachability, with on-disk result caching. The same analyzer ships embedded in the full Bomly CLI build; no JVM is required.