Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
↑ +19 today
Topic Catalog
Software Composition Analysis GitHub Repositories (2026) · Open Source Tools
Discover the best Software Composition Analysis open source repositories on GitHub. Explore trending tools, live star counts, source code, and developer projects updated daily.
SPONSORED BY
5 matching projects · updated Nov 12, 2026
How we rank ↗
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
↑ +13 today
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.
↑ +6 today
Protect against malicious open source packages 🤖
↑ +1 today
Scans your project to determine what components you use
↑ +1 today
From our network