Dependency Track

Component risk tracking from software bills of materials

Visit Dependency Track official site

What it does

Dependency-Track analyzes software components through SBOMs, organizing dependencies, vulnerabilities, and policy outcomes in an interface for projects tracking the composition and risk of the software they maintain or receive from other sources and delivery pipelines.

When to use it

For component information across products, consult SBOM import and policy guides to organize the sources contributing to each project’s reported risk.

CycloneDX

Standard descriptions of software composition

  • security
  • dependencies

Research

OSV

Vulnerability records linked to package versions

  • security
  • dependencies

Research

osv-scanner

Dependency checks against vulnerability data

  • security
  • dependencies

Research