It-Depends

Tool that automatically builds a dependency graph and software bill of materials for source repositories.

Desktopfree

It-Depends is an open-source command-line tool from Trail of Bits that automatically builds a dependency graph and software bill of materials for a source repository across languages including Go, JavaScript, Rust, Python, and C/C++. It resolves the full range of possible dependency versions, maps native library dependencies, and checks findings against the OSV vulnerability database, aimed at security researchers and developers who need supply-chain visibility.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of It-Depends - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim It-Depends to unlock →

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether It-Depends (or something else) actually fits.

Try a problem