Tracks the origin and security status of open source components used within software. It identifies vulnerabilities as well as highlights any licencing issues.