Apache License 2.0

项目介绍

DependencyTrack/dependency-track 是一个托管在 GitHub 上的开源项目,主要使用 Java 编写,采用 Apache License 2.0 许可证,目前获得 4.4k 个 Star、853 次 Fork。

仓库全名
DependencyTrack/dependency-track
开源许可证
Apache License 2.0
Star 数
4.4k
Fork 数
853
未关闭 Issue
885

README 摘要

OWASP Dependency-Track Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM). [!IMPORTANT] Looking for Dependency-Track v4? v4 is in maintenance mode on the 4.14.x branch. v4 documentation:…

完整内容见 GitHub 原始 README 或本页 。

常见问题

dependency-track 用什么语言开发?

主要使用 Java 编写,采用 Apache License 2.0 许可证,目前有 4.4k 个 Star。

dependency-track 可以免费商用吗?

仓库采用 Apache License 2.0 许可证,可免费使用与修改,商业使用请遵守许可证条款(例如保留版权声明与许可声明)。

如何获取 dependency-track 的源码?

可以直接克隆仓库:git clone https://github.com/DependencyTrack/dependency-track.git,默认分支为 main;安装与运行步骤见仓库 README。

dependency-track 最近还在维护吗?

仓库最近一次更新为 1 天前,当前有 885 个未关闭 Issue;Star 数为 4.4k,可作为社区活跃度的参考。

关于

GitHub 原始描述(英文)

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

描述取自 GitHub 官方 API,保持仓库作者书写的原文。

简要分析

热度分
6206
价值分
2873
活跃状态
活跃

语言占比

Dockerfile
FreeMarker
HTML
Java
JavaScript
Makefile
PLpgSQL
Shell
TSQL

Release

README

OWASP Dependency-Track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the capabilities of Software Bill of Materials (SBOM).

Website Documentation Docker Pulls License

Build Tests E2E Tests Coverage

LinkedIn Bluesky Mastodon YouTube

Important 重要

Looking for Dependency-Track v4?

Quickstart

Want to kick the tires? Follow the Quickstart tutorial to get a local instance running with Docker Compose in a few minutes.

Documentation

User-facing documentation is rendered at https://dependencytrack.github.io/docs/ and maintained in the docs repository.

Contributing

  1. Code of conduct
  2. Contribution guidelines
  3. Developer guide

Community

Dependency-Track is an open source project maintained by a community of contributors. Join the monthly community meeting to hear project updates, ask questions, and meet other users and maintainers.

See also

评论

暂无评论