Skip to content
Projects

DependencyTrack/dependency-track has 4,415 GitHub stars and 852 forks. GitHot measured +7 stars in 24 hours and +33 in 7 days. Last checked 2026-11-05 08:37 UTC. Last push 2026-10-31.

How these counts are measured

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Measured star growth

in 24h
+7
in 7 days
+33
in 15 days
Collecting history
in 1 month
Collecting history

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

README.md

Original

OWASP Dependency-Track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM).

Website Documentation Docker Pulls License

Build Tests E2E Tests Coverage

LinkedIn Bluesky Mastodon YouTube

[!IMPORTANT] Looking for Dependency-Track v4?

Quickstart

Want to kick the tires? Follow the Quickstart tutorial to get a local instance running with Docker Compose in a few minutes.

Documentation

User-facing documentation is rendered at https://dependencytrack.github.io/docs/ and maintained in the docs repository.

Contributing

  1. Code of conduct
  2. Contribution guidelines
  3. Developer guide

Community

Dependency-Track is an open source project maintained by a community of contributors. Join the monthly community meeting to hear project updates, ask questions, and meet other users and maintainers.

See also

Explore related projects