Dependency-Track

https://dependencytrack.org/

Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain