OWASP

Equality Object equality is tested using the == operator, while value equality is tested using the .equals(Object) method. For example: String one = new String("abc"); String two = new String("abc"); String three = one; if (one != two) System.out.println("The two objects are not the same."); if (one.equals(two)) System.out.println("But they do contain the same value"); if (one == three) System.out.println("These two are the same, because they use the same reference."); The output is: The two objects are not the same. But they do contain the same value These two are the same,
https://www.owasp.org/index.php/OWASP_Dependency_Check

OWASP Dependency-Check

Dependency-Check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed, vulnerabilities. Currently Java, .NET, Ruby, Node.js, and Python projects are supported

Read full article from Java gotchas - OWASP