l3montree-dev / devguard

DevGuard Backend - Manage your CVEs seamlessly, Integrate your Vulnerability Scanners, Security Framework Documentation made easy, Compliance to security Frameworks - OWASP Incubating Project
https://flawfix.dev
Other
37 stars 4 forks source link

Implement Dependency Graph in FlawFix #69

Closed timbastin closed 5 months ago

timbastin commented 5 months ago

The addition of a dependency graph feature in "flawfix" is proposed to enhance the tool's capabilities in identifying and managing software vulnerabilities. This feature would provide users with a visual representation of their project's dependencies, including libraries and packages, and their interconnections. It will facilitate a deeper understanding of how vulnerabilities in one component may affect others, enabling more informed decision-making and prioritization in vulnerability management.

Why is this important?

  1. Enhanced Visibility: Provides clear visibility into the project's dependency structure, helping to identify indirect dependencies that may also be vulnerable.
  2. Improved Risk Management: Helps prioritize remediation efforts by understanding which vulnerabilities have the greatest potential impact on the project.
  3. Streamlined Updates and Maintenance: Facilitates the assessment of the potential impact of updating or removing dependencies.

Feature Request: