Legacy Mend UI - Reviewing a Library's Dependency Tree

This article explains how to review the dependency tree for a given project.

This information can be useful when you see a vulnerable transitive dependency in your project and would like to understand where this package is pulled from, so you can fix the vulnerability accordingly.

Dependency Hierarchy Tree

To review the dependency hierarchy tree for the entire project, you can click the Show as Hierarchy button on the project page.

With the hierarchy view, you can see all the direct and transitive dependencies resolved during the scan.

Dependency Path

To trace the dependency path for a library, go to the Library Details page and click the view impact analysis next to the library name.

If a library is listed as a transitive dependency for multiple packages, you will see all the dependency paths for each of the root packages.