awesome-alternatives

compare

Dependency-Track vs OSV-Scanner

The same facts for both, read from GitHub every night, and the relation a person reviewed.

Dependency-TrackOSV-Scanner
LanguageJavaGo
LicenceApache-2.0Apache-2.0
Stars4.3k11k
Latest5.1.2v2.6.0
Last push2026-10-062026-10-05
Release cadenceabout 11 days between releasesabout 35 days between releases
Active contributors19+ commit authors on the default branch in the last 90 days19 commit authors on the default branch in the last 90 days
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialDependency-TrackContinuous monitoring of dependencies from SBOMs with policies, without fix pull requests.

    PartialOSV-ScannerDependency and container image scanning against OSV.dev, with guided remediation for npm and Maven.