OWASP Dependency-Track alternatives
Dependency-Track is a tool for analyzing the supply chain components of software to help organizations identify and mitigate risks from third-party and open-source dependencies. It uses Software Bill of Materials (SBOM) to provide insights that traditional Software Composition Analysis (SCA) tools cannot. The platform supports integration with Continuous Integration and Continuous Delivery (CI/CD) environments through its API-first design.