Dependency-Track is a web application that allows organizations to document the use of third-party components across multiple applications and versions.
Java JavaScript CSS Shell
Latest commit 8ee64e7 Apr 17, 2016 @stevespringett Corrected queries

README.md

Build Status Download

Dependency-Track

OWASP Dependency-Track is a Java web application that allows organizations to document the use of third-party components across multiple applications and versions. Further, it provides automatic visibility into the use of components with known vulnerabilities.

The OWASP Top Ten 2013 introduces, for the first time, the use of third-party components with known vulnerabilities. Dependency-Track aims to document the usage of all components, the vendors, libraires, versions and licenses used and provide visibility into the use of vulnerable components.

Development of Dependency-Track is sponsored in part by Axway

Installation, configuration and how-to's can be found on the GitHub Wiki.

General project information can be found on the OWASP Wiki.

Usage

$ mvn clean package

Finally, deploy the resulting WAR to your web application server (Tomcat, Jetty, etc)

or leverage the power of Spring Boot and simply execute

java -jar dtrack.war

If compiling from source, dtrack.war will reside in the 'target' directory.

Mailing List

Subscribe: https://lists.owasp.org/mailman/listinfo/owasp_dependency_track_project

Post: owasp_dependency_track_project@lists.owasp.org

Copyright & License

Dependency-Track is Copyright (c) Axway. All Rights Reserved.

Permission to modify and redistribute is granted under the terms of the GPLv3 license. See the LICENSE.txt file for the full license.

Dependency-Track makes use of several other open source libraries. Please see the NOTICES.txt file for more information.