Transitive Dependency
A package that is not directly declared in a project but is depended upon by a direct dependency. Changes in its behavior do not appear in the project's package.json yet may surface at runtime. The lockfile fixes the resolution result of the entire dependency tree.
Timeline (last 90 days)
Transitive dependencies refer to packages that a project does not declare directly but that are depended on by its direct dependencies.
The risk of patch versions is mainly concentrated in transitive dependencies; before upgrading, check whether the dependency diff involves runtime behavior changes (such as streaming parsing or fetch wrapping).
All Facts (2)
Transitive dependencies refer to packages that a project does not declare directly but that are depended on by its direct dependencies.
50%UnverifiedThe risk of patch versions is mainly concentrated in transitive dependencies; before upgrading, check whether the dependency diff involves runtime behavior changes (such as streaming parsing or fetch wrapping).
50%