dependency-track
5.2.1Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
- Maintenance
- Active366 commits in 3 months · bus factor 1
- License
- Apache-2.0Permissive · OSI-approved
- Security
- 9 advisories7 medium, 2 low · Scorecard 7.9/10
- Supported versions
- 2 lines supportednewest 5.2 · oldest 4.14 until Dec 9, 2026 · 9 ended
4.5k stars · 856 forks · 886 open issues · last release 21 days ago · data checked 1 hour ago
Tour
Nobody has run dependency-track for a tour yet. A tour starts the project in a container, walks through it in a browser and records each step with a screenshot.