# dependency-track

**Repository Path**: trusted-list/dependency-track

## Basic Information

- **Project Name**: dependency-track
- **Description**: Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
- **Primary Language**: Unknown
- **License**: Apache-2.0
- **Default Branch**: main
- **Homepage**: https://dependencytrack.org/
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2026-03-14
- **Last Updated**: 2026-08-24

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

<div align="center">

# OWASP Dependency-Track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk
in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the
capabilities of Software Bill of Materials (SBOM).

[![Website](https://img.shields.io/badge/website-dependencytrack.org-1e3a8a?logo=owasp&logoColor=white)](https://dependencytrack.org/)
[![Documentation](https://img.shields.io/badge/docs-read-2563eb?logo=readthedocs&logoColor=white)](https://dependencytrack.github.io/docs/)
[![Docker Pulls](https://img.shields.io/docker/pulls/dependencytrack/apiserver?logo=docker&logoColor=white&label=docker%20pulls&color=2496ED)](https://hub.docker.com/r/dependencytrack/apiserver)
[![License](https://img.shields.io/badge/license-Apache--2.0-4c1?logo=apache&logoColor=white)](LICENSE.txt)

[![Build](https://img.shields.io/github/actions/workflow/status/DependencyTrack/dependency-track/ci-build.yaml?branch=master&logo=githubactions&logoColor=white&label=build)](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-build.yaml)
[![Tests](https://img.shields.io/github/actions/workflow/status/DependencyTrack/dependency-track/ci-test.yaml?branch=master&logo=githubactions&logoColor=white&label=tests)](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-test.yaml)
[![E2E Tests](https://img.shields.io/github/actions/workflow/status/DependencyTrack/dependency-track/ci-test-e2e.yaml?logo=githubactions&logoColor=white&label=e2e%20tests)](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-test-e2e.yaml)
[![Coverage](https://img.shields.io/codacy/coverage/b2ecd06dab57438a9a55bc4a71c5a8ce?logo=codacy&logoColor=white&label=coverage)](https://app.codacy.com/gh/DependencyTrack/dependency-track/dashboard)

[![LinkedIn](https://custom-icon-badges.demolab.com/badge/LinkedIn-0A66C2?logo=linkedin&logoColor=white)](https://www.linkedin.com/company/owasp-dependency-track)
[![Bluesky](https://img.shields.io/badge/Bluesky-0285FF?logo=bluesky&logoColor=white)](https://bsky.app/profile/dependencytrack.bsky.social)
[![Mastodon](https://img.shields.io/badge/Mastodon-6364FF?logo=mastodon&logoColor=white)](https://infosec.exchange/@DependencyTrack)
[![YouTube](https://img.shields.io/badge/YouTube-FF0000?logo=youtube&logoColor=white)](https://www.youtube.com/@DependencyTrack)

</div>

> [!IMPORTANT]
> **Looking for Dependency-Track v4?**
> * v4 is in maintenance mode on the [`4.14.x` branch](https://github.com/DependencyTrack/dependency-track/tree/4.14.x).
> * v4 documentation: <https://dependencytrack.github.io/docs/4.x>.
> * Migrating from v4 to v5? See [V5_MIGRATION.md](./V5_MIGRATION.md).
> * v4 will reach end-of-life in December 2026, *~6 months* after v5 GA.

## Quickstart

Want to kick the tires? Follow the [Quickstart tutorial](https://dependencytrack.github.io/docs/next/tutorials/quickstart/)
to get a local instance running with Docker Compose in a few minutes.

## Documentation

User-facing documentation is rendered at <https://dependencytrack.github.io/docs/> and maintained in the [docs](https://github.com/DependencyTrack/docs) repository.

## Contributing

1. [Code of conduct](CODE_OF_CONDUCT.md)
2. [Contribution guidelines](CONTRIBUTING.md)
3. [Developer guide](DEVELOPING.md)

## Community

Dependency-Track is an open source project maintained by a community of contributors.
Join the [monthly community meeting](https://github.com/DependencyTrack/community#community-meetings)
to hear project updates, ask questions, and meet other users and maintainers.

## See also

* [frontend](https://github.com/DependencyTrack/frontend): Frontend repository
* [docs](https://github.com/DependencyTrack/docs): Documentation repository
* [helm-charts](https://github.com/DependencyTrack/helm-charts): [Helm](https://helm.sh/) charts
* [community](https://github.com/DependencyTrack/community): Community resources