{"adoption": {"forks": 808, "observed_at": "2026-08-28T04:08:36.348416+00:00", "stars": 4145}, "canonical_url": "https://ross.abutalabs.com/products/dependency-track", "card": {"archived": false, "artifact_type": "application", "description": "Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.", "domain": ["security", "developer-tools", "apis"], "enriched": true, "function": ["security", "vulnerability-scanning", "monitoring", "api-framework", "self-hosted", "dependency-audit"], "health_score": 100, "homepage": "https://dependencytrack.org/", "language": "Java", "license": "Apache-2.0", "license_family": "permissive", "maturity": "active", "member_repos": ["DependencyTrack/dependency-track"], "name": "DependencyTrack/dependency-track", "platform": ["self-hosted", "jvm"], "pushed_at": "2026-08-26T21:34:46+00:00", "repo": "DependencyTrack/dependency-track", "stars": 4145, "tags": ["sbom", "cyclonedx", "software-composition-analysis", "software-supply-chain", "owasp", "devsecops", "component-analysis", "vex", "license-compliance", "devops", "docker", "web-server"], "topics": ["owasp", "appsec", "security", "bom", "vulnerabilities", "component-analysis", "nvd", "software-security", "software-composition-analysis", "sca", "bill-of-materials", "package-url", "purl", "vulnerability-detection", "ossindex", "sbom", "devsecops", "security-automation", "cyclonedx", "hacktoberfest"], "urls": [], "use_cases": ["track vulnerabilities in third-party dependencies across all projects", "ingest and analyze SBOMs from CI/CD pipelines", "enforce security policy on software components and break builds on violations", "monitor software supply chain risk across an enterprise portfolio", "detect typosquatting and tampered packages via integrity verification", "audit and triage vulnerability findings with an exportable trail", "generate software bill of materials compliance reports"], "what_it_is": "OWASP Dependency-Track is an open-source component analysis platform that ingests CycloneDX SBOMs to continuously identify vulnerabilities, license risk, and integrity issues across an organization's software portfolio. It provides a REST API, policy enforcement, EPSS-based prioritization, and audit workflows for software supply chain security.", "when_to_avoid": ["you only need a quick one-off scan of a single project's dependencies rather than a platform", "you cannot operate a self-hosted server or containerized deployment", "you require SCA for languages or ecosystems outside CycloneDX/SBOM-based workflows"], "when_to_choose": ["you need continuous, portfolio-wide component vulnerability monitoring driven by SBOMs", "you want CycloneDX-native SBOM ingestion with policy enforcement and audit workflows", "you need an API-first platform that integrates with CI/CD and multiple vulnerability data sources"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/dependency-track", "repo": "DependencyTrack/dependency-track", "role": "main", "score": 99}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:08:36.348416+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:22:56.774106+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "a1a34e2f956e828ff78567937b772173d8636268ca7b7edac0b68737eee48cbe", "fetched_at": "2026-08-28T04:08:36.348416+00:00", "kind": "readme", "missing": false, "url": "https://github.com/DependencyTrack/dependency-track"}, {"content_hash": "8739a2c24aa9c12f8f1833f6f6b56303451c2947b625b2376b5a04f4c4112d92", "fetched_at": "2026-08-29T09:13:53.164365+00:00", "kind": "homepage", "missing": false, "url": "https://dependencytrack.org/"}, {"content_hash": "cdd9f73d82b059ef0c25787b2180e711734a0970fb214efbc3f5ebe0a7003e39", "fetched_at": "2026-08-29T09:13:53.166793+00:00", "kind": "site_page", "missing": false, "url": "https://dependencytrack.org/features"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 99}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 4796, "days_push": 7, "days_rel": 9, "gap_med": 24.0, "n_releases_24m": 25}, "score": 99, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}