Transitive Dependencies

Transitive dependencies are indirect dependencies in software applications or projects. Specifically, they refer to libraries or modules that your code doesn’t directly import or use but are instead required by the libraries or modules you do use directly. These hidden dependencies significantly impact your software's security and stability, as vulnerabilities within them can quietly affect your entire system.

Managing transitive dependencies is challenging due to their complexity and obscurity. They can create intricate dependency trees, complicating maintenance and increasing risks like version conflicts and security vulnerabilities. Raven’s dependency path and detailed Software Bill of Materials (SBOM), provide the essential tools to effectively mitigate these risks and ensure application reliability and security.