THE PROS AND CONS OF OWASP’S DEPENDENCYTRACK
If you have the time and resources to manage and maintain it then it’s possible to build a complete. SBOM of course being the output of another OWASP project: CycloneDX. DependencyTrack has a lot of good things going for it: a modern “dark mode” UI, policy compliance testing, impact analysis, time-series metrics, various SSO solutions, and it’s completely open source, too.
