# OWASP Dependency-Track - **Canonical URI:** https://www.vioscale.ai/software/owasp-dependency-track - **Category:** Dependency Management - **Homepage:** https://dependencytrack.org - **Also known as:** owasp-dependency-track - **Profile claimed by vendor:** no - **Last updated:** 2026-08-26T19:17:58.683Z ## Vioscale score **59.1 / 100**, confidence 28% (low). Computed 2026-09-01. Composite of weighted, independently-sourced signals (no user reviews, no vendor payment). | Signal | Score | Weight | Contribution | Evidence present | |---|--:|--:|--:|:--:| | price_level | 100 | 0.052 | 5.2 | ✓ | | reliability | 0 | 0.073 | 0 | - | | capabilities | 0 | 0.084 | 0 | - | | repo_stars | 68.2 | 0.026 | 1.8 | ✓ | | integrations | 34.6 | 0.09355555555555557 | 3.2 | ✓ | | dependent_projects | 0 | 0.063 | 0 | ✓ | | dev_activity | 63.1 | 0.094 | 5.9 | ✓ | | release_cadence | 88.3 | 0.052 | 4.6 | ✓ | | security_posture | 0 | 0.073 | 0 | - | | package_downloads | 0 | 0.136 | 0 | - | | security_score | 0 | 0.042 | 0 | - | | pricing_transparency | 80 | 0.084 | 6.7 | ✓ | | community_qa_activity | 0 | 0.063 | 0 | - | ## Pricing _As of 2026-08-18, [verify at source](https://dependencytrack.org). Independently observed._ Open source · Free tier ## About Provides organizations with a centralized inventory of software components across their entire technology stack and identifies security vulnerabilities from multiple authoritative sources. Designed for continuous monitoring and risk assessment within CI/CD pipelines, with policies to enforce compliance and team notifications. _Independently observed._ ## Platform & deployment - **Platforms:** CLI, Web - **Deployment:** On-premise, Self-hosted ## Integrations (15) _Independently observed._ - NVD - Sonatype OSS Index - GitHub Advisories - Snyk - OSV - Trivy - VulnDB - Slack - Teams - Mattermost - Email - Webhooks - OpenID Connect - Active Directory - LDAP ## Release history | Version | Date | Type | |---|---|---| | [5.0.5](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.5) | 2026-08-24 | stable | | [5.0.4](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.4) | 2026-07-30 | stable | | [5.0.3](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.3) | 2026-07-20 | stable | | [4.14.3](https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.3) | 2026-07-20 | stable | | [5.0.2](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.2) | 2026-06-18 | stable | | [5.0.1](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.1) | 2026-06-12 | stable | | [5.0.0](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.0) | 2026-06-07 | stable | | [5.0.0-rc.5](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.0-rc.5) | 2026-06-05 | prerelease | | [5.0.0-rc.4](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.0-rc.4) | 2026-06-03 | prerelease | | [5.0.0-rc.3](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.0-rc.3) | 2026-06-02 | prerelease | | [5.0.0-rc.2](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.0-rc.2) | 2026-05-31 | prerelease | | [5.0.0-rc.1](https://github.com/DependencyTrack/dependency-track/releases/tag/5.0.0-rc.1) | 2026-05-28 | prerelease | | [4.14.2](https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.2) | 2026-05-07 | stable | | [4.14.1](https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.1) | 2026-04-03 | stable | | [4.14.0](https://github.com/DependencyTrack/dependency-track/releases/tag/4.14.0) | 2026-03-09 | stable | _… and 5 earlier release(s)._ ## Security & compliance Known vulnerabilities: 0 (0 in the last 12 months) ([source](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=dependency-track&per_page=100)). A count reflects scale and disclosure, not quality. ## Facts Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule. ### integrations | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | integrations.count | 15 | [link](https://dependencytrack.org) | 2026-08-18 | 60% (medium) | ### pricing | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | pricing.model | commercial | [link](https://dependencytrack.org) | 2026-08-26 | 40% (low) | | pricing.free_tier | yes | [link](https://dependencytrack.org) | 2026-08-18 | 60% (medium) | | pricing.price_level | free | [link](https://dependencytrack.org) | 2026-08-18 | 60% (medium) | | pricing.transparent | yes | [link](https://dependencytrack.org) | 2026-08-18 | 60% (medium) | ### activity | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | activity.commits_last_30d | 100 | [link](https://github.com/dependencytrack/dependency-track/pulse) | 2026-08-26 | 65% (medium) | ### adoption | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | adoption.github_stars | 4,146 | [link](https://github.com/dependencytrack/dependency-track) | 2026-08-26 | 90% (high) | | adoption.dependent_repos | 0 | [link](https://packages.ecosyste.ms/api/v1/packages/lookup?repository_url=https%3A%2F%2Fgithub.com%2Fdependencytrack%2Fdependency-track) | 2026-08-26 | 85% (high) | ### language | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | language.primary | Java | [link](https://github.com/dependencytrack/dependency-track) | 2026-08-26 | 90% (high) | ### license | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | license.spdx | Apache-2.0 | [link](https://github.com/dependencytrack/dependency-track) | 2026-08-26 | 95% (high) | ### release | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | release.cadence_days | 21 | [link](https://github.com/dependencytrack/dependency-track/releases) | 2026-08-26 | 70% (medium) | ### security | Attribute | Value | Source | Retrieved | Confidence | |---|---|---|---|---| | security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=dependency-track&per_page=100","last_12m":0,"max_severity":null}` | [link](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=nixpkgs&package_name=dependency-track&per_page=100) | 2026-08-26 | 90% (high) | --- *Source: Vioscale (https://www.vioscale.ai/software/owasp-dependency-track). Independent, evidence-based software intelligence. Cite the canonical URI.*