gumtreeuk/dependency-track

Dependency-Track is a web application that allows organizations to document the use of third-party components across multiple applications and versions.

Dependency-Track

OWASP Dependency-Track is a Java web application that allows organizations to document the use of third-party components across multiple applications and versions. Further, it provides automatic visibility into the use of components with known vulnerabilities.

The OWASP Top Ten 2013 introduces, for the first time, the use of third-party components with known vulnerabilities. Dependency-Track aims to document the usage of all components, the vendors, libraires, versions and licenses used and provide visibility into the use of vulnerable components.

Development of Dependency-Track is sponsored in part by Axway

Installation, configuration and how-to's can be found on the GitHub Wiki.

General project information can be found on the OWASP Wiki.

Usage

$ mvn clean package

Finally, deploy the resulting WAR to your web application server (Tomcat, Jetty, etc)

or leverage the power of Spring Boot and simply execute

java -jar dtrack.war

If compiling from source, dtrack.war will reside in the 'target' directory.

Mailing List

Subscribe: [https://lists.owasp.org/mailman/listinfo/owasp_dependency_track_project] subscribe

Post: [[email protected]] post

Copyright & License

Dependency-Track is Copyright (c) Axway. All Rights Reserved.

Permission to modify and redistribute is granted under the terms of the GPLv3 license. See the [LICENSE.txt] GPLv3 file for the full license.

Dependency-Track makes use of several other open source libraries. Please see the [NOTICES.txt] notices file for more information.