DependencyTrack · Trending

DependencyTrack/dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

View on GitHub Website / Demo Back to listing

4.3kstars 826forks 100+contributors Java

README.md

View on GitHub

# OWASP Dependency-Track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk
in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the
capabilities of Software Bill of Materials (SBOM).

[![Website](https://img.shields.io/badge/website-dependencytrack.org-1e3a8a?logo=owasp&logoColor=white)](https://dependencytrack.org/)
[![Documentation](https://img.shields.io/badge/docs-read-2563eb?logo=readthedocs&logoColor=white)](https://dependencytrack.github.io/docs/)
[![Docker Pulls](https://img.shields.io/docker/pulls/dependencytrack/apiserver?logo=docker&logoColor=white&label=docker%20pulls&color=2496ED)](https://hub.docker.com/r/dependencytrack/apiserver)
[![License](https://img.shields.io/badge/license-Apache--2.0-4c1?logo=apache&logoColor=white)](LICENSE.txt)

[![Build](https://img.shields.io/github/actions/workflow/status/DependencyTrack/dependency-track/ci-build.yaml?branch=main&logo=githubactions&logoColor=white&label=build)](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-build.yaml)
[![Tests](https://img.shields.io/github/actions/workflow/status/DependencyTrack/dependency-track/ci-test.yaml?branch=main&logo=githubactions&logoColor=white&label=tests)](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-test.yaml)
[![E2E Tests](https://img.shields.io/github/actions/workflow/status/DependencyTrack/dependency-track/ci-test-e2e.yaml?logo=githubactions&logoColor=white&label=e2e%20tests)](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-test-e2e.yaml)
[![Coverage](https://img.shields.io/codacy/coverage/b2ecd06dab57438a9a55bc4a71c5a8ce?logo=codacy&logoColor=white&label=coverage)](https://app.codacy.com/gh/DependencyTrack/dependency-track/dashboard)

[![LinkedIn](https://custom-icon-badges.demolab.com/badge/LinkedIn-0A66C2?logo=linkedin&logoColor=white)](https://www.linkedin.com/company/owasp-dependency-track)
[![Bluesky](https://img.shields.io/badge/Bluesky-0285FF?logo=bluesky&logoColor=white)](https://bsky.app/profile/dependencytrack.bsky.social)
[![Mastodon](https://img.shields.io/badge/Mastodon-6364FF?logo=mastodon&logoColor=white)](https://infosec.exchange/@DependencyTrack)
[![YouTube](https://img.shields.io/badge/YouTube-FF0000?logo=youtube&logoColor=white)](https://www.youtube.com/@DependencyTrack)

</div>

> [!IMPORTANT]
> **Looking for Dependency-Track v4?**
> * v4 is in maintenance mode on the [`4.14.x` branch](https://github.com/DependencyTrack/dependency-track/tree/4.14.x).
> * v4 documentation: <https://dependencytrack.github.io/docs/4.x>.
> * Migrating from v4 to v5? See [V5_MIGRATION.md](./V5_MIGRATION.md).
> * v4 will reach end-of-life in December 2026, *~6 months* after v5 GA.

## Quickstart

Want to kick the tires? Follow the [Quickstart tutorial](https://dependencytrack.github.io/docs/next/tutorials/quickstart/)
to get a local instance running with Docker Compose in a few minutes.

## Documentation

User-facing documentation is rendered at <https://dependencytrack.github.io/docs/> and maintained in the [docs](https://github.com/DependencyTrack/docs) repository.

## Contributing

1. [Code of conduct](CODE_OF_CONDUCT.md)
2. [Contribution guidelines](CONTRIBUTING.md)
3. [Developer guide](DEVELOPING.md)

## Community

Dependency-Track is an open source project maintained by a community of contributors.
Join the [monthly community meeting](https://github.com/DependencyTrack/community#community-meetings)
to hear project updates, ask questions, and meet other users and maintainers.

## See also

* [frontend](https://github.com/DependencyTrack/frontend): Frontend repository
* [docs](https://github.com/DependencyTrack/docs): Documentation repository
* [helm-charts](https://github.com/DependencyTrack/helm-charts): [Helm](https://helm.sh/) charts
* [community](https://github.com/DependencyTrack/community): Community resources

Repository info

Default branch: main
Latest version: 5.2.0
Created: 2013-07-17
Last activity: 2026-10-14
License: Apache-2.0
Open issues: 1k
Watchers: 76

Contributors

nscuro

4.2k contributions

stevespringett

2.4k contributions

dependabot[bot]

1.3k contributions

sahibamittal

485 contributions

mehab

109 contributions