mirror of
https://github.com/usestrix/strix.git
synced 2026-08-22 19:09:37 +02:00
feat(reporting): render transitive dependency chain in dependency evidence
This commit is contained in:
@@ -191,6 +191,14 @@ async def test_dependency_report_records_transitive_chain(report_state: ReportSt
|
||||
report["dependency_metadata"]["dependency_path"]
|
||||
== "express@4.18.1 > body-parser@1.20.0 > qs@6.10.2"
|
||||
)
|
||||
assert (
|
||||
"**Transitive dependency:** introduced by the direct dependency `express@4.18.1`."
|
||||
in report["evidence"]
|
||||
)
|
||||
assert (
|
||||
"**Dependency chain:** `express@4.18.1 > body-parser@1.20.0 > qs@6.10.2`"
|
||||
in report["evidence"]
|
||||
)
|
||||
|
||||
|
||||
async def test_dependency_report_omits_blank_chain_fields(report_state: ReportState) -> None:
|
||||
|
||||
Reference in New Issue
Block a user