Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Sca GitHub Repositories (2026) · Open Source Tools
Discover the best Sca open source repositories on GitHub. Explore trending tools, live star counts, source code, and developer projects updated daily.
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
Payments for Ruby on Rails apps
A suite of tools to automate software compliance checks.