Introducing Dependency-Track

Dependency-Track is an open source component analysis platform that tracks the use of components as bill-of-materials and uses
multiple sources of vulnerability intelligence to continuously monitor components for known, publicly disclosed vulnerabilities.

When a vulnerability is discovered, the platform lets you know about all the affected projects across your organization.

Dependency-Track is designed to be used in a continuous integration and delivery environment and strives to be an integral part of
an organizations cyber supply chain risk management strategy.