Projects/OWASP Dependency Track Project/Roadmap

The initial release will be a simple asset management application for the tracking of third party components across multiple applications and versions. This will provide static knowledge of the A9 issue across the enterprise. Future releases will focus on bidirectional integration with OWASP Dependency-Check so that 1) applications can be automatically scanned using Dependency-Track as the sole source of evidence (allows for automation capabilities), and 2) Dependency-Check can provide dynamic evidence collection to Dependency-Track.