Skip to content

Commit ba4d739

Browse files
authored
Merge pull request #16190 from cmwilson21/refresh-around-dependencies-#15750
Refresh around dependencies #15750
2 parents c40e10f + 845c6db commit ba4d739

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

content/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ Enterprise owners can configure the dependency graph at an enterprise level. For
4040
### Dependencies view
4141

4242
{% ifversion fpt or ghec %}
43-
Dependencies are grouped by ecosystem. You can expand a dependency to view its dependencies. For dependencies on public repositories hosted on {% data variables.product.product_name %}, you can also click a dependency to view the repository. Dependencies on private repositories, private packages, or unrecognized files are shown in plain text.
43+
Dependencies are grouped by ecosystem. You can expand a dependency to view its dependencies. Dependencies on private repositories, private packages, or unrecognized files are shown in plain text. If the package manager for the dependency is in a public repository, {% data variables.product.product_name %} will display a link to that repository.
4444

4545
If vulnerabilities have been detected in the repository, these are shown at the top of the view for users with access to {% data variables.product.prodname_dependabot_alerts %}.
4646

@@ -84,7 +84,10 @@ You can disable the dependency graph at any time by clicking **Disable** next to
8484

8585
## Changing the "Used by" package
8686

87-
If the dependency graph is enabled, and your repository contains a package that's published on a supported package ecosystem, {% data variables.product.prodname_dotcom %} displays a "Used by" section in the sidebar of the **Code** tab of your repository. For more information about the supported package ecosystems, see "[About the dependency graph](/github/visualizing-repository-data-with-graphs/about-the-dependency-graph#supported-package-ecosystems)."
87+
You may notice some repositories have a "Used by" section in the sidebar of the **Code** tab. Your repository will have a "Used by" section if:
88+
* The dependency graph is enabled for the repository (see the above section for more details).
89+
* Your repository contains a package that is published on a [supported package ecosystem](/github/visualizing-repository-data-with-graphs/about-the-dependency-graph#supported-package-ecosystems).
90+
* Within the ecosystem, your package has a link to a _public_ repository where the source is stored.
8891

8992
The "Used by" section shows the number of public references to the package that were found, and displays the avatars of some of the owners of the dependent projects.
9093

0 commit comments

Comments
 (0)