trailofbits/it-depends
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
415 stars26forks6issuespushed
blog.trailofbits.com/2021/12/16/it-depends ↗github.com/trailofbits/it-depends ↗
Worth your time
rules reportOutside contributors get real replies here, and their work gets merged. Replies are slow here: typically 21.2 days, beyond your 7-day budget.
3 of 3outside PRs merged (100%)
checked