Here is the CLI tool from OWASP. This basically detect publicly disclosed vulnerabilities with your code dependency libraries.
https://jeremylong.github.io/DependencyCheck/dependency-check-cli/index.html
https://jeremylong.github.io/DependencyCheck/dependency-check-cli/index.html