CALL-GRAPH REACHABILITY DAG
Transitive Dependency Reachability Visualizer
Tracing whether vulnerable open-source functions in transitive sub-dependencies are directly callable from your application root.
YOUR APP ENTRY
app.ts:L18
expressApp.listen()
→
DIRECT DEPENDENCY
axios@1.6.0
Calls: axios.get()
→
TRANSITIVE (SAFE)
follow-redirects@1.15.4
Vulnerable method not invoked