# OWASP Dependency-Track
Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk
in the software supply chain. Dependency-Track takes a unique and highly beneficial approach by leveraging the
capabilities of Software Bill of Materials (SBOM).
[](https://dependencytrack.org/)
[](https://dependencytrack.github.io/docs/)
[](https://hub.docker.com/r/dependencytrack/apiserver)
[](LICENSE.txt)
[](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-build.yaml)
[](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-test.yaml)
[](https://github.com/DependencyTrack/dependency-track/actions/workflows/ci-test-e2e.yaml)
[](https://app.codacy.com/gh/DependencyTrack/dependency-track/dashboard)
[](https://www.linkedin.com/company/owasp-dependency-track)
[](https://bsky.app/profile/dependencytrack.bsky.social)
[](https://infosec.exchange/@DependencyTrack)
[](https://www.youtube.com/@DependencyTrack)
[!IMPORTANT]
Looking for Dependency-Track v4?
* v4 is in maintenance mode on the 4.14.x branch.
* v4 documentation: https://dependencytrack.github.io/docs/4.x.
* Migrating from v4 to v5? See V5_MIGRATION.md.
* v4 will reach end-of-life in December 2026, ~6 months after v5 GA.
Quickstart
Want to kick the tires? Follow the Quickstart tutorial
to get a local instance running with Docker Compose in a few minutes.
Documentation
User-facing documentation is rendered at https://dependencytrack.github.io/docs/ and maintained in the docs repository.
Contributing
- Code of conduct
- Contribution guidelines
- Developer guide
Community
Dependency-Track is an open source project maintained by a community of contributors.
Join the monthly community meeting
to hear project updates, ask questions, and meet other users and maintainers.
See also