Dependency-Check
· dependency-check is a utility that identifies project dependencies and checks if there are any known, publicly disclosed vulnerabilities. This tool can be part of the solution to the OWASP Top 10 2013: A9 - Using Components with Known Vulnerabilities.
Download JD-GUI to open JAR file and explore Java source code file (.class .java)
Click menu "File → Open File..." or just drag-and-drop the JAR file in the JD-GUI window dependency-check-parent-8.4.0.jar file.
Once you open a JAR file, all the java classes in the JAR file will be displayed.