DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
⚡ Executive Summary & Quick Facts
Authoritative Sourcedependency-track is dependency-track is an open-source project written in Java: Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain..
“According to real-time open source telemetry recorded on GitHubRepo.cloud (as of November 2026), DependencyTrack/dependency-track has accumulated 4,447 GitHub stars and 853 forks. It is written in Java, licensed under Apache-2.0, and ranks #3,209 globally. It is actively maintained with the latest commit recorded on Nov 10, 2026.”
| Repository | DependencyTrack/dependency-track ↗ |
|---|---|
| Primary Category | appsec |
| Language & Stack | Java |
| Software License | Apache-2.0 |
| Community Traction | ★ 4.4K stars · ⑂ 853 forks · #3,209 globally |
| Maintenance | ● Active (Last commit: Nov 10, 2026) · 886 open issues |
| Target Audience | Developers and engineering teams building with Java, seeking reliable, tested, and actively maintained tooling for production workloads. |
🛡️ Repository Maintenance & Health Audit (2026)
Health Score: 92/100 · Grade AYes, dependency-track is actively maintained. Continuous telemetry recorded the last code commit on Nov 10, 2026 (2 days ago). Supported by 4,447 stars and 853 community forks, this repository holds a calculated health index of 92/100, reflecting very active (commits within last 14 days) and active community feedback (886 open).
Star History
Add Live Star History & Verified Badges to README.md
Keep your repository README looking professional and dynamic. As our continuous crawler records new stars, these official SVG badges update in real time with zero maintenance.
Renders your high-resolution star trajectory chart right inside your GitHub README or project docs.
[](https://githubrepo.cloud/repo/DependencyTrack/dependency-track?utm_source=readme_chart)Compact badges for your README header. Real-time stars, velocity, health audit, and rank.
[](https://githubrepo.cloud/repo/DependencyTrack/dependency-track?utm_source=readme_badge) [](https://githubrepo.cloud/repo/DependencyTrack/dependency-track?utm_source=readme_badge) [](https://githubrepo.cloud/repo/DependencyTrack/dependency-track?utm_source=readme_badge) [](https://githubrepo.cloud/repo/DependencyTrack/dependency-track?utm_source=readme_badge) [](https://githubrepo.cloud/repo/DependencyTrack/dependency-track?utm_source=readme_badge)Momentum
+201
STARS · LAST 30 DAYS
7
PER DAY
#191
MOST-STARRED Java
| Window | 7 days | 30 days | 90 days |
|---|---|---|---|
| Stars gained | +56 | +201 | +630 |
| Per day | 8 | 7 | 7 |
| Forks gained | +3 | +35 | +43 |
dependency-track gained 201 stars in the last 30 days, about 7 a day, and now has 4.4K. It is about 13 years old and has averaged roughly 342 stars a year. It ranks #191 among Java repositories and #3,209 across all languages on GitHubRepo.
Trending Record
44
DAYS ON TRENDING
#770
BEST RANK
Sep 24, 2026
FIRST APPEARANCE
Active
STATUS TODAY
dependency-track has maintained a continuous presence across global trending indexes, peaking at #770. Below is the 30-day activity profile:
💡 Overview
dependency-track is an open-source project written in Java: Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Engineered for speed, consistency, and developer ease, it solves common hurdles in appsec, bill-of-materials, bom. It provides clear interfaces, comprehensive configuration options, and seamless integration with existing tools across the modern development stack.
⚡ Key Features
Optimized execution pipeline written in Java for predictable speed.
Zero-friction configuration with comprehensive sensible defaults out of the box.
Cross-platform runtime support across Linux, macOS, and Windows environments.
Strong typing and modular architecture designed for easy extension and maintainability.
Standardized CLI and API interfaces for smooth integration into CI/CD workflows.
Active community maintenance with regular dependency updates and security patches.
📥 Installation
$ git clone https://github.com/DependencyTrack/dependency-track.git
cd dependency-track⚙ System Requirements
Platforms
- • macOS
- • Linux
- • Windows
Runtime & Dependencies
JDK 17 or higher (OpenJDK / GraalVM)
Architecture
x86_64, ARM64 (Apple Silicon & Graviton)
🧠 How It Works
dependency-track coordinates its core functionality through a modular Java pipeline. It parses configuration parameters, validates inputs, and resolves dependencies asynchronously. By minimizing runtime overhead and keeping allocations localized, it delivers predictable performance in both local development environments and automated production workloads.
🎯 Production Use Cases
Production System Integration
Embed dependency-track into Java backend services to handle core application logic.
CI/CD Automated Pipelines
Run automated validation, builds, and integration suites during deployments.
Developer Tooling & Workflows
Accelerate developer onboarding with pre-configured project utilities.
Open Source Extension
Fork and customize internal modules under the repository's open Apache-2.0 license.
🚀 Getting Started
Install dependency-track using your package manager: `git clone https://github.com/DependencyTrack/dependency-track.git`
Initialize your project workspace or configuration file for dependency-track.
Import dependency-track into your codebase or invoke it directly from your terminal.
Execute your test suite or run `dependency-track --help` to verify successful setup.
👍 Strengths
⚠️ Considerations
⇄ Alternatives & Direct Competitors
👥 Who Should Use This
Developers and engineering teams building with Java, seeking reliable, tested, and actively maintained tooling for production workloads.
🏆 Nearby in the Rankings
DependencyTrack/dependency-track is currently ranked #3,209 by stars across every repository tracked on GitHubRepo. These are adjacent projects:
| Rank | Repository | Language | Stars | Action |
|---|---|---|---|---|
| #3,203 | gptme/gptme | Python | ★ 4.5K | Compare ↗ |
| #3,205 | jhlywa/chess.js | TypeScript | ★ 4.5K | Compare ↗ |
| #3,205 | crate/crate | Java | ★ 4.5K | Compare ↗ |
| #3,207 | OffGridPete/Fieldwatch | Kotlin | ★ 4.4K | Compare ↗ |
| #3,208 | zan8in/afrog | Go | ★ 4.4K | Compare ↗ |
| #3,209 | DependencyTrack/dependency-track This Project | Java | ★ 4.4K | |
| #3,210 | sparklemotion/mechanize | Ruby | ★ 4.4K | Compare ↗ |
| #3,210 | dotnet/docfx | C# | ★ 4.4K | Compare ↗ |
| #3,212 | alextselegidis/easyappointments | PHP | ★ 4.4K | Compare ↗ |
| #3,212 | wmariuss/awesome-devops | JavaScript | ★ 4.4K | Compare ↗ |
| #3,214 | dremin/RetroBar | C# | ★ 4.4K | Compare ↗ |
Frequently Asked Questions
What does dependency-track do? +
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Is dependency-track actively maintained in 2026? +
Yes, dependency-track is actively maintained. The latest code push was recorded on Nov 10, 2026 (2 days ago). It holds a calculated Maintenance Health Score of 92/100 (A rating) with 4,447 stars and 886 open issues.
What language is dependency-track written in? +
The primary language is Java. Topics include: appsec, bill-of-materials, bom, component-analysis, cyclonedx.
How many stars does dependency-track have? +
dependency-track has 4,447 stars and 853 forks on GitHub.
How does dependency-track rank among GitHub repositories? +
With 4,447 stars, DependencyTrack/dependency-track is ranked #3,209 globally across all repositories tracked on GitHubRepo and #191 among Java projects.
What license is dependency-track distributed under? +
The repository reports a Apache-2.0 license. Always verify the repository LICENSE file for legal terms.
