Summary

Dependency Graph identifies all upstream dependencies and public downstream dependents of a repository or package. This launch will add support for Dependency Graph to GHAE.

Intended Outcome

To understand a repository's dependencies on GHAE.

How will it work?

Dependency Graph reads a repository's explicit declared dependencies, which is a standard format for each ecosystem, for example, package.json for npm. We parse all known package manifest files in a user’s repository and uses this to construct a graph with known dependency names and versions.