Mend eases the process of keeping track of all the used 3rd party dependencies within a product. It not only scans for the pure occurrence (also transitively) but takes also care of license and vulnerabilities. The new platform approach is much more user friendly than the old UI. Review collected by and hosted on G2.com.

Integration into jira is somehow buggy, so that security issues still show up in jira security, although the scan shows that they are remediated. For the beginning it is still a steep learning curve, but it is worth the effort to setup all the workflows - although it is intransparent how to add exceptions. Review collected by and hosted on G2.com.