Repositories list

• hyades-apiserver

  Public
  Fork of the Dependency-Track API server. It includes various changes necessary to work with Hyades.

  Java

  •

  Apache License 2.0

  •30•18•0•18•Updated Jan 6, 2026Jan 6, 2026

• hyades-frontend

  Public
  Fork of the Dependency-Track frontend. It includes various changes necessary to work with Hyades.

  Vue

  •

  Apache License 2.0

  •23•7•0•41•Updated Jan 6, 2026Jan 6, 2026

• helm-charts

  Public
  Helm Charts for Dependency-Track

  Smarty

  •

  Apache License 2.0

  •41•46•10•3•Updated Jan 6, 2026Jan 6, 2026

• hyades

  Public
  Incubating project for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services.

  Java

  •

  Apache License 2.0

  •36•92•86•11•Updated Jan 6, 2026Jan 6, 2026

• dependency-track

  Public

  DependencyTrack/dependency-track’s past year of commit activity
  Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

  securityowaspbom+ 17vulnerabilitiesappseccomponent-analysisnvdvulnerability-detectionhacktoberfestsca+ 10

  Java

  •

  Apache License 2.0

  •697•3.5k•943•64•Updated Jan 6, 2026Jan 6, 2026

• hyades-e2e

  Public
  End-to-end tests for OWASP Dependency-Track

  TypeScript

  •

  Apache License 2.0

  •1•0•0•7•Updated Jan 6, 2026Jan 6, 2026

• frontend

  Public
  Frontend UI for Dependency-Track

  front-endvuejsvue+ 1hacktoberfest

  Vue

  •

  Apache License 2.0

  •208•147•184•88•Updated Jan 3, 2026Jan 3, 2026

• client-go

  Public
  Go client library for OWASP Dependency-Track

  gogolangclient+ 4owaspbomsbomdependency-track

  Go

  •

  Apache License 2.0

  •37•28•3•4•Updated Jan 2, 2026Jan 2, 2026

• vuln-db

  Public
  Proof of concept for OWASP Dependency-Track's own, centralized vulnerability database.

  Java

  •

  Apache License 2.0

  •0•10•5•6•Updated Nov 10, 2025Nov 10, 2025

• jbang-catalog

  Public

  DependencyTrack/jbang-catalog’s past year of commit activity
  JBang catalog of OWASP Dependency-Track

  Java

  •

  Apache License 2.0

  •0•0•0•0•Updated Nov 8, 2025Nov 8, 2025

• community

  Public
  Community resources for OWASP Dependency-Track

  Apache License 2.0

  •0•15•0•0•Updated Nov 5, 2025Nov 5, 2025

• dependencytrack.org

  Public
  Public website for dependencytrack.org

  CSS

  •4•4•2•0•Updated Oct 7, 2025Oct 7, 2025

• cyclonedx-property-taxonomy

  Public

  DependencyTrack/cyclonedx-property-taxonomy’s past year of commit activity
  CycloneDX Property Taxonomy for the dependency-track namespace

  Apache License 2.0

  •0•0•0•0•Updated Dec 5, 2024Dec 5, 2024

• hyades-vuln-policy-examples

  Public
  Example Hyades vulnerability policies

  Apache License 2.0

  •0•0•0•1•Updated Oct 28, 2024Oct 28, 2024

• gh-upload-sbom

  Public
  Publishes BOMs to Dependency-Track from GitHub Actions

  JavaScript

  •

  Apache License 2.0

  •30•58•7•3•Updated Oct 7, 2024Oct 7, 2024

• .github

  Public
  0•0•0•0•Updated Jan 10, 2023Jan 10, 2023

• branding

  Public
  2•2•1•0•Updated Jan 5, 2023Jan 5, 2023

• v3.8.0-v4.0.0-migration

  Public
  Migrates Dependency-Track v3.8.0 to v4.0.0

  PLpgSQL

  •

  Apache License 2.0

  •7•1•6•1•Updated Sep 3, 2021Sep 3, 2021

• fortify-ssc-plugin

  Public
  Plugin for Fortify Software Security Center (SSC) that can import Dependency-Track results

  sscfortify

  Java

  •

  Apache License 2.0

  •3•7•3•4•Updated Dec 21, 2020Dec 21, 2020

• public-api-java

  Public
  Dependency-Track API Client for Java

  Java

  •

  Apache License 2.0

  •9•4•0•1•Updated Oct 13, 2020Oct 13, 2020

• front-end

  Public archive
  Prototyping next-generation Dependency-Track user-interface (EXPERIMENTAL)

  front-endvuejsvue+ 1front-end-app

  Vue

  •

  Apache License 2.0

  •10•4•1•0•Updated Sep 30, 2019Sep 30, 2019

• vue-easy-pie-chart

  Public archive
  With full power of easy-pie-chart for Vue

  JavaScript

  •12•0•0•0•Updated Sep 10, 2018Sep 10, 2018