No functional change, small change in main README.md for OWASP dependencyCheck
@@ -468,7 +468,8 @@ The below command activates a gradle plugin (OWASP) and Identifies
and reports known vulnerabilities (CVEs) in OFBiz library dependencies.
This command takes a long time to execute because it needs to download
all plugin dependencies and the CVE identification process is also
-time consuming
+time consuming. But it's the only way to check OFBiz does not use
+wulnerables libraries.
`gradlew -PenableOwasp dependencyCheck`
