Projects Tagged 'dependency-security' for Dependency Vulnerability Management and Software Supply-Chain Protection
Explore the projects > tags pillar filtered by the dependency-security tag to find a curated list of open-source and enterprise projects focused on dependency vulnerability scanning, SBOM generation, software composition analysis (SCA), transitive dependency graph analysis, and supply-chain risk mitigation. Each project listing includes repository links, supported package managers (npm, pip, Maven), CI/CD integration notes, license and maturity metadata, and vulnerability database mappings (CVE, NVD) so you can quickly assess fit; use filters to narrow by language, package manager, CI integration, maintenance activity, or security rating. Get actionable guidance on implementing dependency-security best practices—automated SCA in CI pipelines, semantic versioning, dependency pinning, and vulnerability triage—and click through to compare implementations, integrate tools into your build pipeline, or contribute to projects that match your security and deployment requirements.
