Depscan container image is now based on almalinux 9.4 with python 3.12, so might be a breaking change for python scans. If your project requires an older version of Java or python, use the AppThreat [base-images](https://github.com/AppThreat/base-images) to generate an SBOM first, and then invoke depscan with the `--bom` argument.
We have also added support for malicious packages scanning.
What's Changed
* Feature/default risk audit by prabhu in https://github.com/owasp-dep-scan/dep-scan/pull/311
**Full Changelog**: https://github.com/owasp-dep-scan/dep-scan/compare/v5.3.5...v5.4.0