Transitive Dependency - CI/CD用語集の定義
Transitive dependency は、自分が宣言したのではなく、直接の依存関係の 1 つが必要とするパッケージです。それでも build に取り込まれ、supply chain のリスクとなります。
関連ガイド
Lockfile Drift - CI/CD Glossary DefinitionLockfile drift is when the committed lockfile no longer matches the manifest, so CI installs different versio…
Dependency Pinning - CI/CD Glossary DefinitionDependency pinning locks each dependency to an exact version so builds are reproducible and an upstream relea…
Reproducible Build - CI/CD Glossary DefinitionA reproducible build produces bit-for-bit identical output from the same source and inputs, letting anyone ve…