Tag
dependency-tree
Safeguard articles tagged "dependency-tree" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Concepts
Understanding Dependency Trees
The libraries you install are only the tip of the iceberg. Each one pulls in its own dependencies, which pull in more, forming a tree that can run hundreds of packages deep. Understanding that tree is the first step to securing it.
Jul 2, 20267 min read
Open Source Security
How Snyk Open Source builds a full dependency tree from p...
How Snyk Open Source turns package-lock.json and yarn.lock files into a full dependency graph to power vulnerability matching and fix advice.
Aug 30, 20258 min read