There are many open source Threat Intelligence Platforms to monitor software and associated vulnerabilities.

MISP, OpenCTI and more should help in maintaining the Third Party Assessment.