间接依赖的组件漏洞较难溯源

[NightClown]

Preflight Checklist

• [X] I agree to follow the Code of Conduct that this project adheres to.
• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.

Problem Description

间接依赖存在漏洞的组件，希望能够展示源组件的名称或者依赖的链路

Proposed Solution

能够展示间接依赖了存在漏洞的组件的源组件名称，以及给出源组件的建议安全版本，便于问题定位及修改

Alternatives Considered

暂无

Additional Information

No response