Dependency-Track
Dependency-Track is a web service that reads the parts lists (called SBOMs) of software projects and flags components with known security problems, so organizations can track and reduce risk in what they ship. It is aimed at security and IT teams who manage software built from many third-party pieces.
How hard it is to start using it. Easy: install it like a normal app, or use it in your browser. Advanced: you run it on your own server, use the command line, or it is a tool for developers.
Features
Software parts lists (SBOM)Reads SBOMs; creating them is not stated.
SourcePartly
Listed in
Checks packages for known vulnerabilities; no secret-leak scanning shown.
How to help
AI contributionsNot stated
The project has not said how it feels about AI-written contributions. Maintainers can set this by claiming the listing.