nscuro

traefik-plugin-geoblock

traefik plugin to whitelist requests based on geolocation

dtapac

Audit Dependency-Track findings and policy violations via policy as code

fdnssearch

Swiftly search FDNS datasets from Rapid7 Open Data

dtrack-client

Unofficial Go client library for OWASP Dependency-Track

versatile

Java implementation of vers, a mostly universal version range specifier

dependency-track

Dependency-Track is an intelligent Supply Chain Component Analysis platform that allows organizations to identify and reduce risk from the use of third-party and open source components.

Alpine

An opinionated scaffolding framework that jumpstarts Java projects with an API-first design, secure defaults, and minimal dependencies

cdx-central

CLI utility to download public CycloneDX SBOMs from Maven Central

CPE-Parser

A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST

cyclonedx-cli

CycloneDX CLI tool for SBOM analysis, merging, diffs and format conversions.

cyclonedx-core-java

CycloneDX SBOM Model and Utils for Creating and Validating BOMs

cyclonedx.org

Public website

datanucleus-core

DataNucleus core persistence support - the basis for anything in DataNucleus

datanucleus-rdbms

DataNucleus support for persistence to RDBMS Datastores

datanucleus-test-jdo

Template test for demonstrating issues with DataNucleus using the JDO API

dependency-track-frontend

Frontend UI for Dependency-Track

dependencytrack.org

Public website for dependencytrack.org

dracon

Security scanning orchestration and results enrichment framework -- forked and rewritten from @thought-machine/dracon

dtbench

dtdiff

gotalias

Got alias?

hyades

Proof-of-concept for decoupling responsibilities from Dependency-Track's monolithic API server into separate, scalable services, based on Apache Kafka.

library-sbom-transitive-poc

micrometer

An application observability facade for the most popular observability tools. Think SLF4J, but for observability.

Open-Vulnerability-Project

Java libraries for working with available vulnerability data sources (GitHub Security Advisories, NVD, EPSS, CISA Known Exploited Vulnerabilities, etc.)

ossindex-client

Unofficial Go client for Sonatype OSS Index

owasp-change.github.io

An Open Letter to the OWASP Board

parallel-consumer

Parallel Apache Kafka client wrapper with per message ACK, client side queueing, a simpler consumer/producer API with key concurrency and extendable non-blocking IO processing.

quarkus

Quarkus: Supersonic Subatomic Java.

quarkus-native-protobuf