Transitive Dependency - CI/CD Glossary Definition
A transitive dependency is a package required by one of your direct dependencies rather than declared by you; it still ends up in your build and your supply-chain risk.
Related guides
Lockfile Drift - CI/CD Glossary DefinitionLockfile drift is when the committed lockfile no longer matches the manifest, so CI installs different versio…
Dependency Pinning - CI/CD Glossary DefinitionDependency pinning locks each dependency to an exact version so builds are reproducible and an upstream relea…
Reproducible Build - CI/CD Glossary DefinitionA reproducible build produces bit-for-bit identical output from the same source and inputs, letting anyone ve…