#software-composition-analysis (6 Repositories)
Ranked open-source repositories tagged with #software-composition-analysis, scored by pull request acceptance likelihood and maintainer engagement velocity.
63.7%
20.7h
6 repositories tagged #software-composition-analysis
opossum-tool/OpossumUI
A light-weight app to audit and inventory large codebases for open source license compliance.
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
microsoft/component-detection
Scans your project to determine what components you use
safedep/vet
Protect against malicious open source packages 🤖
murphysecurity/murphysec
An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。