These technical notes provide information on composition analysis:
Table of contents
- Can my JavaScript dependencies be delivered bundled with webpack?
- How do I audit findings in the Software Composition Analysis Report?
- How do I resolve libraries not delivered?
- How do I resolve the "Unable to determine Package-URL identifiers..." warning
- How do I resolve transitive dependencies?
- How do I scan my application with OWASP Dependency-Check on the command line?
- Why do the results from running Dependency Check look different than the report I received?