DependencyTrack

Definitions

1. An open source platform for tracking software component inventories, vulnerabilities, and supply chain risk, often using SBOM data. It is commonly used in security programs to monitor dependency exposure over time.

   In plain English: An open source tool for monitoring software dependencies and their security risks.

   Example: "Security wired the build pipeline into DependencyTrack so every release gets checked against known vulnerable components."

Related Terms

• SBOM Analysis
• Fork Bomb
• License Scanning
• Open Source Security
• Open Source Supply Chain
• Package Security
• Transitive Dependency
• Zero-Day Patch
• SBOM Standard