Dependency Management

Black Duck provides software composition analysis that helps organizations manage security, quality, and license compli...

Yarn is a package manager for JavaScript projects that doubles as a project manager, handling monorepos and workspaces...

GitLab is a complete DevSecOps platform delivered as a single application for the entire software development lifecycle...

Tool for finding and fixing vulnerabilities in open source dependencies with priority scoring and remediation.

Google service for understanding dependencies of open source packages with security advisories and license information.

GitHub integrated tool that automatically creates pull requests to keep project dependencies up to date and secure.

Cilium is an open-source eBPF-based networking, observability, and security platform for Kubernetes and cloud-native en...

Free tool from Mend for scanning open source components in repositories for known vulnerabilities and license issues.

GitHub is the world's largest software development platform, providing Git repository hosting, code review, CI/CD, proj...

Anytype is a local-first, privacy-focused knowledge management platform providing a personal wiki, task manager, and di...

pnpm is a fast, disk-space-efficient JavaScript package manager that uses hard links and symlinks to save disk space an...

CFEngine is one of the original configuration management tools, providing autonomous infrastructure management for larg...

Automated dependency update tool that creates pull requests to keep project dependencies current across many languages.

Jira by Atlassian is the leading issue and project tracking platform for software development teams. It supports Scrum...

Open source discovery service monitoring millions of packages across 36 package managers for dependency health.

Endor Labs provides dependency lifecycle management that helps organizations reduce open-source risk by identifying rea...

SolarWinds Service Desk is a cloud-based ITSM solution that provides incident management, asset management, and IT serv...

Supply chain security tool proactively detecting malicious npm, PyPI, and Go packages before they reach your codebase.

dbt provides a SQL-first transformation tool that enables analytics engineers to build reliable data pipelines with ver...