Skip to content
/ dependency-track Public

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

dependencytrack.org/

License

Apache-2.0 license
3.1k stars 633 forks Branches Tags Activity
Star
Notifications You must be signed in to change notification settings

DependencyTrack/dependency-track

Error
Looks like something went wrong!

About

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

dependencytrack.org/

Topics

security owasp bom vulnerabilities appsec component-analysis nvd vulnerability-detection hacktoberfest sca software-security security-automation devsecops software-composition-analysis bill-of-materials ossindex purl package-url sbom cyclonedx

Resources

Readme

License

Apache-2.0 license

Code of conduct

Code of conduct

Security policy

Security policy
Activity
Custom properties

Stars

3.1k stars

Watchers

75 watching

Forks

633 forks
Report repository

Releases 70

4.13.2 Latest
May 8, 2025
+ 69 releases

Sponsor this project

Contributors 152

+ 138 contributors

Languages