Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
Why do you think that https://github.com/CycloneDX/cyclonedx-maven-plugin is a good alternative to dependency-track