DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Java4,258 stars818 forksApache-2.0 appsecbill-of-materialsbomcomponent-analysiscyclonedxdevsecopshacktoberfestnvdossindexowasppackage-urlpurlsbomscasecuritysecurity-automationsoftware-composition-analysissoftware-securityvulnerabilitiesvulnerability-detection