search

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.
https://dependencytrack.org/
Apache License 2.0
2.68k stars 576 forks source link

Vulnerable Component Ratio Missing Data #368

Open msymons opened 5 years ago

msymons commented 5 years ago

The "Vulnerable Component Ratio" often fails to display the 2nd integer (denominator?).

Current Behavior:

The "Vulnerable Component Ratio" displays on the top-right of the dashboard. The 2nd integer in the ratio seems to appear and disappear. In other words, I have seen it fail to display for a while and then (I am pretty sure) it did display. And currently it is not...

image

If a ratio is defined as A:B, we have A, but not B.

Steps to Reproduce:

Navigate to dashboard and inspect. I am not sure how to reproduce (ie, cause "B" to poof).

Expected Behavior:

Environment:

stevespringett commented 5 years ago

Yeah, this is a known issue. Seen it before. I think if the quantity is large but a small percentage of the total, this issue will trigger.

I will likely remove the text from the progress bar itself so that its only a graphic and will likely create a hover that will display the percentage and ratio when hovered. Eventually, when the new front end is done, most of the charts will be dynamic, but that's a future thing.

msymons commented 5 years ago

Hovers/tooltip are nice, but don't they have accessibility issues?

More importantly, one cannot copy text from the DT implementation. Example (from Dashboard and Project Overview):

image

I have projects where the data is a wee bit more dense than just a single "1".

stevespringett commented 5 years ago

I've also thought about donut graphs as well. Regardless of what is chosen, I think we agree that the current behavior needs to improve. And yes, there are usability issues with hovers, especially on mobile.