Skip to main content
We have eight types of dependency linkage we define for the detection of transitive dependencies.
TypeDescription
DirectIs the entirety of that project or package.
Statically linkedLinked into the component as a static library or object file.
Dynamically linkedLinked into the component as a dynamic library.
BuildWas part of the build process like a compiler or linker.
DerivedWas derived from the component like public key parameters extracted from a private key.
Project/PackageIs part of that project or package.
VendoredIs distributed as part of a software package with or without modifications but originates from a different project or package.
UnspecifiedIts linkage could not be determined fully.