SHSelfHostIndex
DE

Dependency-Track

Intelligent software supply chain component analysis

Developer Tools & Git ★ 4.3k stars Medium setup Apache-2.0

Dependency-Track is an open-source platform that monitors application dependencies for known vulnerabilities using software bills of materials. It helps organizations reduce supply chain risk.

Official siteSource code

Key features

  • Consumes SBOM files
  • Continuous vulnerability tracking
  • Policy enforcement
  • Component risk scoring

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Active community (4.3k GitHub stars)

Is Dependency-Track secure?

No known vulnerabilities affect Dependency-Track's latest release (5.2.0). OSV.dev lists 5 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2025-61776, published 2025-10-07 (372 days ago), fixed in 4.13.5

Source: OSV.dev, checked 2026-10-14. How this is measured.

Dependency-Track replaces

Self-hosted Snyk alternatives

Health badge

Maintain Dependency-Track? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 91 · excellent

Markdown
[![SelfHostIndex health score for Dependency-Track](https://selfhostindex.com/badge/dependency-track.svg)](https://selfhostindex.com/app/dependency-track/)
HTML
<a href="https://selfhostindex.com/app/dependency-track/"><img src="https://selfhostindex.com/badge/dependency-track.svg" alt="SelfHostIndex health score for Dependency-Track"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/dependency-track.svg
   :alt: SelfHostIndex health score for Dependency-Track
   :target: https://selfhostindex.com/app/dependency-track/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Dependency-Track

4 head-to-head comparisons.

Similar developer tools & git apps