Dependabot alerts shows transitive dependency paths

[github-product-roadmap]

Summary

Dependabot alerts will surface more information about transitive dependencies, including direct dependency information and transitive dependency paths.

Intended Outcome

In this initial ship, we expect to add filtering ability for alerts on direct and indirect dependencies, as well as surfacing of the direct dependencies that pull in a transitive dependency.

How will it work?

No response

[spaltrowitz]

this has shipped to dotcom! 🚢 https://github.blog/changelog/2022-09-07-dependabot-unlocks-transitive-dependencies-for-npm-projects/

leaving open to track to GHES