Tag

direct-vs-transitive-dependencies

Safeguard articles tagged "direct-vs-transitive-dependencies" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source Security

Direct vs Transitive Dependencies

Most known vulnerabilities live in transitive dependencies, not the ones in your manifest. Here's how to tell them apart and prioritize what's exploitable.

Apr 3, 20267 min read