Transitive Closure (Dependencies) - CI/CD Glossary Definition
The transitive closure of a dependency set is every package reachable by following dependencies of dependencies, not just the ones you declared directly. It is the full graph that must be installed and audited.
Why it matters
A vulnerability or breaking change in a deep transitive dependency affects your build even though you never listed it. A lockfile pins the entire transitive closure for reproducibility.
Related guides
Dependency Resolution - CI/CD Glossary DefinitionDependency Resolution: Dependency resolution is the process a package manager uses to choose concrete version…
Version Solving - CI/CD Glossary DefinitionVersion Solving: Version solving is the constraint-satisfaction algorithm inside dependency resolution that s…
Lockfile - CI/CD Glossary DefinitionLockfile: A **lockfile** (package-lock.json, Cargo.lock, etc.) pins exact dependency versions so builds are r…