Dependency Detection

Identifying the entire supply chain in your software product is essential in determining whether security vulnerabilities or other risk factors exist. Depending on the data available, Ion Channel can detect all of a project's direct and transitive dependencies.

Direct Dependencies

Direct dependencies are components that the project explicitly indicates are required for the project to run or compile.

Transitive Dependencies

Transitive dependencies are any dependencies of your project's direct dependencies (see the diagram below). For most projects, there is no limit to how far down that dependency tree will be checked to find all of the transitive dependencies in a project.

Detection Details and Requirements

Ion Channel will look for dependencies within the file formats listed below. For a dependency file to be scanned, it must be located less than six folders deep. Searching Git submodules are not supported.