Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Report dependencies by declaring project #47

Merged
merged 2 commits into from
Jul 10, 2023
Merged

Report dependencies by declaring project #47

merged 2 commits into from
Jul 10, 2023

Commits on Jul 10, 2023

  1. Report dependencies by declaring project 

    This change aims to reduce redundant dependency reporting in repository snapshots,
with the aim to make the result work better with the GitHub Dependency Graph.
Previously, a dependency was reported for every project that referenced it directly
or transitively through a project dependency. This resulted in many dependency versions
 being reported many times within the snapshot, and these duplicates were then mirrored
in the GitHub Dependency Graph and Dependabot Security Alerts.

With this change, only external dependencies are reported, and only within the context
of the project that declares those dependencies. This should help reduce the massive
redundancy in the generated snapshot and make these files more useful.
    @bigdaz
    bigdaz committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    d86baf0 View commit details
    Browse the repository at this point in the history

  2. var -> val

    @bigdaz
    bigdaz committed Jul 10, 2023
    Configuration menu
    Copy the full SHA
    73dfee4 View commit details
    Browse the repository at this point in the history