Topic Hub
#software-composition-analysis (5 Repositories)
Ranked open-source repositories tagged with #software-composition-analysis, scored by pull request acceptance likelihood and maintainer engagement velocity.
Topic Avg Merge Rate
82.0%
Avg Review Latency
61.0h
Filter by language
5 repositories tagged #software-composition-analysis
S TierTypeScript 73 4 GFIs
opossum-tool/OpossumUI
A light-weight app to audit and inventory large codebases for open source license compliance.
89.9%
Merge Rate
3h
First Review
100%
1st-Timers
5
Maintainers
A TierJava 4.1k 2 GFIs
DependencyTrack/dependency-track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
85.4%
Merge Rate
2d
First Review
36%
1st-Timers
33
Maintainers
A TierGo 1.1k 1 GFIs
safedep/vet
Protect against malicious open source packages 🤖
75.0%
Merge Rate
10h
First Review
100%
1st-Timers
2
Maintainers
B TierJava 7.7k
dependency-check/DependencyCheck
OWASP dependency-check is a software composition analysis utility that detects publicly disclosed vulnerabilities in application dependencies.
83.8%
Merge Rate
2d
First Review
80%
1st-Timers
21
Maintainers
B TierC# 550
microsoft/component-detection
Scans your project to determine what components you use
76.0%
Merge Rate
8d
First Review
90%
1st-Timers
5
Maintainers