| Type | Description |
|---|---|
| Direct | Is the entirety of that project or package. |
| Statically linked | Linked into the component as a static library or object file. |
| Dynamically linked | Linked into the component as a dynamic library. |
| Build | Was part of the build process like a compiler or linker. |
| Derived | Was derived from the component like public key parameters extracted from a private key. |
| Project/Package | Is part of that project or package. |
| Vendored | Is distributed as part of a software package with or without modifications but originates from a different project or package. |
| Unspecified | Its linkage could not be determined fully. |
Analysis Engine
Transitive Dependencies
We have eight types of dependency linkage we define for the detection of transitive dependencies.