Dependency track

We want to upload a SBOM to https://deps.sub.uni-goettingen.de/ to keep track of vulnerabilities