Skip to main content

Maven Dependency Hierarchy

The following is a known issue with the Maven Dependency Hierarchy functionality.

SCA-58421: Maven dependency graph shows incomplete parent-child relationships for large dependency sets

When you run a transitive scan and view the dependency graph for a Maven project with several dependencies (for example, war-util 6.2.5), some parent-child relationships are missing compared to the data returned by the deps.dev API. As a result, certain components (such as hk2-core) appear with fewer parents in the Code Insight dependency graph than are reported by deps.dev, so the hierarchy is not fully accurate.

Workaround: None Exists