Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Why do you think that https://github.com/nexB/scancode-toolkit is a good alternative to dependency-track