SBOM Dependency Tree Explorer

Click any component to highlight its path from the root. Amber + red nodes carry a known CVE.

Select a component

Click a node in the graph to see its version, license, hash, any listed CVEs, and the dependency path from my-web-app down to it.

Root application
Direct dependency
Transitive dependency
Known CVE