DependencyTrack / DependencyTrack/dependency-track

Introduce toggle button in Dependency Graph to toggle component scope

Open
#3,416 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Within my projects i have a number of development only dependencies and these are polluting my components and can result in un-ncessary false flags for vulnerabilites etc. For Instance adding Microsoft.VisualStudio.Web.CodeGeneration.Design as a development time dependency is adding nearly 70 dependencies, 50 of which are humanizer. I currently do not have a way to filter those dev dependencies out.

### Proposed Behavior

I wish for there to be a toggle button in the Dependency graph screen with the default state being off like the other buttons. This button should say "show all scopes" and if on all packages components regardless of scope are shown whereas if off, only the required components are shown.

### Notes
Functionality would only provide benefit once https://github.com/CycloneDX/cyclonedx-dotnet/issues/843 is fixed.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.