DependencyTrack / DependencyTrack/frontend

Dependency Graph Filtering

Open
#87 1 comment 4 reactions 0 assignees View on GitHub
enhancement help wanted
Dominant language
Vue
Stars
171
Forks
250
Avg merge
11h 12m
Merged PRs (30d)
82

Description

### Current Behavior:
The Dependency Graph implementation is currently displays all dependencies (excepting #85) but lacks functionality that would aide using it as a tool.

### Proposed Behavior:
Add filtering so that one can cut through the noise of a 300 component maven project (or 1000 component npm project!).
* Filter by vulnerabilities. Thus, if (X depends on Y and Y depends on Z) and Z has a vulnerability, then seeing that on the graph might point one in the direction of first checking if an update is available for X.
* Filter by license policy violation... I want to know how a problem license is getting into the project
* Indicate when dependencies have scope "optional". A problem dependency that is optional can be excluded!
* Indicate on the tree when dependencies have updates available. In the XYZ example above, this might point one to updating Y is there is no update available for X, or Z itself (the vulnerable component) is no updates exist for X or Y.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.