DependencyTrack/dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

appsecbill-of-materialsbomcomponent-analysiscyclonedxdevsecopshacktoberfestnvdossindexowasp

License & maintenance

Apache-2.0 is a permissive license: free to use commercially with attribution.

Last code push today.

	Repository	Stars	Language	License	Activity
1	KeygraphHQ/shannonShannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploit	★ 49.1k	TypeScript	AGPL-3.0	Active
2	juice-shop/juice-shopOWASP Juice Shop: Probably the most modern and sophisticated insecure web application	★ 14.1k	TypeScript	MIT	Active
3	OWASP/wstgThe Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.	★ 10.1k	CSS	CC-BY-SA-4.0	Active
4	aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	★ 38.5k	Go	Apache-2.0	Active
5	OWASP/CheatSheetSeriesThe OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.	★ 33.7k	JavaScript	CC-BY-SA-4.0	Active
6	zaproxy/zaproxyThe ZAP by Checkmarx Core project	★ 16k	Java	Apache-2.0	Active
7	anchore/grypeA vulnerability scanner for container images and filesystems	★ 13k	Go	Apache-2.0	Active
8	infoslack/awesome-web-hackingA list of web application security	★ 7.3k	—	MIT	Active