SHSelfHostIndex
DE

Dependency-Track

Intelligent software supply chain component analysis

Developer Tools & Git ★ 4.2k stars Medium setup Apache-2.0

Dependency-Track is an open-source platform that monitors application dependencies for known vulnerabilities using software bills of materials. It helps organizations reduce supply chain risk.

Official siteSource code

Key features

  • Consumes SBOM files
  • Continuous vulnerability tracking
  • Policy enforcement
  • Component risk scoring

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Active community (4.2k GitHub stars)

Dependency-Track replaces

Self-hosted Snyk alternatives

Compare Dependency-Track

4 head-to-head comparisons.

Similar developer tools & git apps