Dependency-Track
/All repositories
Overview
HEALTH SCORE
Excellent*
Partial score (2/3 categories)
62out of 65
Strong maintainer coverage. Development cadence is the only remaining gap. Security & Supply Chain is unavailable, so weights were redistributed.
LIFECYCLE
Active
Consistent commits, responsive maintainers, regular releases, and healthy issue triage.
Health breakdown
Excellent*(62/65)
Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.
Maintainer responsiveness
Median response time is 0 days.
Bus factor
15 active maintainers currently have merge rights.
Organization Diversity
Contributors span 338 organizations.
Project Achievements
Leaderboards
About
Dependency-Track is an intelligent Component Analysis Platform that allows organizations to identify and reduce risk in their software supply chain. It continuously monitors component usage across all versions of every application in an organization's portfolio to proactively identify risk from the use of vulnerable or out-of-date components.
First commit
Software value
$29M
Tags
appsec
bill-of-materials
bom
component-analysis
cyclonedx
devsecops
hacktoberfest
nvd
ossindex
owasp
package-url
purl
sbom
sca
security
security-automation
software-composition-analysis
software-security
vulnerabilities
vulnerability-detection
License(s)
Apache-2.0
Data sources
Git
GitHub