DependencyDetail
Where an observed dependency came from: the package, the versions requested and resolved, and the lockfile that records it. Absent for a declared dependency, which names none of these.
Shape
- formatPackageRegistryFormatnpmcargopypior nulloptionalThe package ecosystem a registry speaks. A group has at most one registry per format.
- lockfile_pathstring or nulloptional
- package_namePackageName (string) or nulloptional
- resolvedstring or nulloptionalThe version the lockfile actually pins.
- version_reqstring or nulloptionalWhat the manifest asked for, where the lockfile records it.
Example
Synthesized example{
"format": "npm",
"lockfile_path": "lockfile-path-11ca",
"package_name": "payments-api",
"resolved": "resolved-3c1e",
"version_req": "version-req-40a6"
}
Graph
Used inside
Contains
No named schema inside.
Used by
Sent by 0 operations
No operation takes it as a request body.
Returned by 0 operations
No operation returns it directly.