Path to the victimized dependency

[mbiarnes]

Is it possible to print the path to the victimized dependency when it fails the build due to a vulnerability instead only the name of the dependency?
In some cases it is very difficult to find this dependency.

[nealharris]

+1 I have some code for which victims-enforcer complains of a dependency that I'm quite sure my code doesn't even depend on.

[abn]

@nealharris it might be a dependency of a dependency or some level down fwiw.

@gcmurphy I am thinking something like this maybe?

[gcmurphy]

Yep. I think that's a good idea. I'll look into how I can do that.

On 6 Jun 2014, at 6:58 pm, Arun Babu Neelicattu [email protected] wrote:

@nealharris it might be a dependency of a dependency or some level down fwiw.

@gcmurphy I am thinking something like this maybe?

—
Reply to this email directly or view it on GitHub.