Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Tracks components, licences and vulnerabilities from CycloneDX SBOMs; no scanning of its own.
- Language
- Java
- Licence
- Apache-2.0
- Stars
- 4.3k
- Latest
- 5.1.2
- Last push
- 2026-10-06