ByteZone
Back to listClaim this project

DependencyTrackDeveloper tools

Dependency Track

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk

  • Self-hostable
  • Docker supported
Open websiteView on GitHub
Popularity
4.1k Stars
GitHub stars
Recent activity
8/23/2026
Updated in the last 30 days
License
APACHE-2.0
Permissive

Why it matters

We look beyond stars: what problem it solves, whether it creates real utility, and what makes its approach worth noticing.

Last 90 days

Community activity

In the last 90 days there were 164 new issues and 688 pull requests; the bounded issue/PR samples include 58 issue authors and 5 PR contributors, with at least 11 releases.

Maintainer responsiveness

The 100-issue window sample had a 61% close rate, and the 100-pull-request sample had a 91% merge rate. Maintainer-response observations covered 33% of that issue sample, with a 0% response rate and median first response of not enough data.

5 contributors in PR sampleAt least 11 releasesIssue response rate 0% · sample 33 (33% coverage)PR merge rate 91% · 100 sampled in window

Key highlights

  • frontend: Frontend repository
  • docs: Documentation repository
  • helm-charts: Helm charts

Quick start

How it is installed, how hard it is, and where to start.

Docker supportedSelf-hostable

Best for

  • Teams that want data on their own servers
  • People who prefer Docker deploys

Watch outs

  • 3 inferred from materials — review under Sources below

Sources

Each field shows its status and source — expand to review.

6 · Expand

  • Latest release

    Verified

    5.0.4

    Source: GitHub API · latest_release=5.0.4 · 8/24/2026

  • License

    Verified

    Apache-2.0

    Source: GitHub API · license.spdx_id=Apache-2.0 · 8/24/2026

  • One-liner

    Verified

    {"en":"Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk","zh":"Dependency-Track 是 OWASP 旗下的核心开源项目，专注于软件供应链安全与 SBOM（软件物料清单）管理。它通过自动化分析组件风险，帮助企业识别并降低开源依赖带来的安全隐患。"}

    Source: heuristic_batch_publish · batch-publish-tools heuristic write · 8/24/2026

  • Category hint

    Inferred from materials

    developer-tools

    Source: Project README · hint=developer-tools · 8/24/2026

  • supports docker

    Verified

    Yes

    Source: Repository file · dockerfile=true; compose=false · 8/24/2026

  • supports self host

    Inferred from materials

    Yes

    Source: Project README · matched self-host keywords · 8/24/2026

Related projects

Other verified projects matched by category, capabilities, and intended roles.

claude-code

An agentic coding tool for the terminal that understands codebases, handles routine development tasks, explains code, and works with Git workflows.

Same Developer tools categoryActive in the last 30 days

spec-kit

An open-source CLI toolkit for Spec-Driven Development that guides AI coding agents through structured specification, planning, and code generation steps.

Same Developer tools categoryActive in the last 30 days

llama.cpp

A lightweight LLM inference engine implemented in C/C++, supporting various hardware backends and model quantization.

Same Developer tools categoryActive in the last 30 days

codex

OpenAI’s coding agent that runs locally, with terminal, IDE, and desktop-app entry points.

Same Developer tools categoryActive in the last 30 days

supabase

An open-source Postgres development platform offering auto-generated APIs, authentication, and real-time database subscriptions.

Same Developer tools categoryActive in the last 30 days

puppeteer

A JavaScript library that provides a high-level API to control Chrome or Firefox over DevTools Protocol or WebDriver BiDi.

Same Developer tools categoryActive in the last 30 days