Post

As much as I love the spirit and idea of DependencyTrack, I really dislike the implementation. The app is heavy on resource consumption, the API is clunky to use, and lack of token auth for automation feels ironic for a security focused project

15/12/25, 9:15 pm0 reposts0 likes

Audun Mo (he/him)

@audunmo.dev

15 Dec 2025

I strongly believe that almost every software business should be creating, aggregsting, and analyzing SBOMs, but the proprietary solutions are all bundled in with massive packages that are ill-suited to smaller shops. DTrack fills a hole there, but I think it's too much of a hassle for most to use