Skip to content

Refresh around dependencies #15750 #16190

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Mar 17, 2022
Merged

Refresh around dependencies #15750 #16190

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
3d71565
added first note about dependencies viewed in public repository to pa…
cmwilson21 Mar 10, 2022
40606b8
changed the wording around the used by package paragraph
cmwilson21 Mar 11, 2022
c327b7c
Apply suggestions from code review
cmwilson21 Mar 17, 2022
845c6db
Merge branch 'main' into refresh-around-dependencies-#15750
mchammer01 Mar 17, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions ...anding-your-software-supply-chain/exploring-the-dependencies-of-a-repository.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ Enterprise owners can configure the dependency graph at an enterprise level. For
### Dependencies view

{% ifversion fpt or ghec %}
Dependencies are grouped by ecosystem. You can expand a dependency to view its dependencies. For dependencies on public repositories hosted on {% data variables.product.product_name %}, you can also click a dependency to view the repository. Dependencies on private repositories, private packages, or unrecognized files are shown in plain text.
Dependencies are grouped by ecosystem. You can expand a dependency to view its dependencies. Dependencies on private repositories, private packages, or unrecognized files are shown in plain text. If the package manager for the dependency is in a public repository, {% data variables.product.product_name %} will display a link to that repository.

If vulnerabilities have been detected in the repository, these are shown at the top of the view for users with access to {% data variables.product.prodname_dependabot_alerts %}.

Expand Down Expand Up @@ -84,7 +84,10 @@ You can disable the dependency graph at any time by clicking **Disable** next to

## Changing the "Used by" package

If the dependency graph is enabled, and your repository contains a package that's published on a supported package ecosystem, {% data variables.product.prodname_dotcom %} displays a "Used by" section in the sidebar of the **Code** tab of your repository. For more information about the supported package ecosystems, see "[About the dependency graph](/github/visualizing-repository-data-with-graphs/about-the-dependency-graph#supported-package-ecosystems)."
You may notice some repositories have a "Used by" section in the sidebar of the **Code** tab. Your repository will have a "Used by" section if:
* The dependency graph is enabled for the repository (see the above section for more details).
* Your repository contains a package that is published on a [supported package ecosystem](/github/visualizing-repository-data-with-graphs/about-the-dependency-graph#supported-package-ecosystems).
* Within the ecosystem, your package has a link to a _public_ repository where the source is stored.

The "Used by" section shows the number of public references to the package that were found, and displays the avatars of some of the owners of the dependent projects.

Expand Down