Question
A dependency has a known vulnerability. What does the warning message include?
- A. an easily understandable visualization of dependency change
- B. a brief description of the vulnerability Correct
- C. how many projects use these components
- D. the security impact of these changes
Explanation
When dependency review finds a dependency with a known vulnerability, the warning message gives a brief description of that vulnerability so the reviewer can see what the problem is before merging. A visualization of the dependency changes, how many projects use the components, and the security impact of the changes describe what dependency review offers as a whole. They are not the content of the warning for a vulnerable dependency.
