DependencyTrack/frontend

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

DevGuard Backend - Secure your Software Supply Chain - Attestation-based compliance as Code, manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy - OWASP Incubating Project

Secure your supply chain, understand dependencies in your environment, know about vulnerabilities in those dependencies and patch them

Protect against malicious open source packages 🤖

Command-line interface for socket.dev security analysis

A comprehensive list of software composition analysis tools.

The mission of the Ortelius community is to expose weak links in the software supply chain by continuously gathering and analyzing software supply chain intelligence.

ꙮ Review dependencies changes to prevent supply chain attack

Packj stops ⚡ Solarwinds-, ESLint-, and PyTorch-like attacks by flagging malicious/vulnerable open-source dependencies ("weak links") in your software supply-chain