Tidelift also has a similar program: https://tidelift.com/about/lifter https://tidelift.com/about/lifter But dependency tracking is hard and all of these platf

Tidelift also has a similar program: https://tidelift.com/about/lifter https://tidelift.com/about/lifter But dependency tracking is hard and all of these platforms only scratch the surface. For example, I've never seen a solution that detects C libraries used from other languages, let alone the dependencies of these libraries. Then there are build-time dependencies which are hard to detect. Here's an example of a complex dependency chain: redmine -> ruby-commonmarker -> libcmark -> re2c Wake me up if someone offers a solution that detects chains like that.