acamposm/atlas-dependency-track-connector

A robust PHP connector for the Dependency Track API.

dev-master 2026-05-04 19:42 UTC

Requires

• php: ^8.5
• guzzlehttp/guzzle: ^7.8

Requires (Dev)

• phpstan/phpstan: ^2.0
• phpunit/phpunit: ^11.0

MIT

• Angel Campos

Published on Packagist.org on 2026-08-08 18:54 UTC

README

A robust, modern PHP API client for OWASP Dependency Track.

Features

• Modern PHP: Built for PHP 8.5+ using features like Property Hooks and Enums.
• Resource-based: Clean API surface using organized resources (Projects, BOM, Vulnerabilities, etc.).
• Type-safe: Comprehensive type hints and PHPDoc for excellent IDE support.
• Battle-tested: 100% test coverage with PHPUnit.
• Clean Code: Static analysis with PHPStan at the highest level.

Installation

composer require acamposm/atlas-dependency-track-connector

Quick Start

use Atlas\Connectors\DependencyTrack\DependencyTrackClient;
use Atlas\Connectors\DependencyTrack\Enums\SortOrder;

$client = new DependencyTrackClient('https://dtrack.example.com/api', 'your-api-key');

// Get all projects sorted by name
$projects = $client->projects()->all([
    'sortName' => 'name',
    'sortOrder' => SortOrder::ASCENDING,
]);

// Upload a BOM
$client->bom()->upload([
    'project' => '38640b33-4ba9-4733-bdab-cbfc40c6f8aa',
    'bom' => base64_encode($cycloneDxContent),
]);

Laravel Integration

For Laravel users, we provide specialized setup guides:

• Standard Setup (.env)
• Advanced Database-driven Setup

Testing

vendor/bin/phpunit

Static Analysis

vendor/bin/phpstan analyze

License

This project is licensed under the MIT License - see the LICENSE.md file for details.