HarelMil

@theinfosecguy +1 @oliverchang In my opinion it would be great not just to outline as boolean whether it is a direct or transitive, but to indicate the depth of the...

@oliverchang Sure. TL;DR - Direct/indirect and dependency depth are great indicators for prioritizing vulnerable package remediation processes at scale. Dependency depth will be an excellent indication for understanding the possibility...