dep-scan icon indicating copy to clipboard operation
dep-scan copied to clipboard

Published 20 hours ago • verified publisher icon owasp-dep-scan

Feature: Meta and starter packages such as spring starter could be handled better

Open prabhu opened this issue 1 year ago • 0 comments

Request Description

We seem to be incorrectly flagging spring and log4j packages as "Indirect dependency" by only looking at the dependency tree. We could have a way to define meta and starter packages so that the insights are clearer.

Additional Information

No response

prabhu avatar Jan 25 '24 00:01 prabhu