Java's New Threat Model - DZone Java
The next positive change in Java security is to strengthen the supply chain of software components, know what’s running and what’s vulnerable, and communicate this information with non-technical experts whose data is at risk.
Common Java Application Maven Central Java Application Supply Vulnerability Detection Azul Vulnerability Detection Java Virtual Machine
Source: dzone.com