Highlight scanner found all the code but did not count the dependency libraries. Python backend used has several dependencies. The dependencies are referenced in package-lock.json
Details
By default, only level 0 of dependencies is extracted (direct component references in package.json, package-lock.json).
Use this while scanning --includeAllDependencies (optional) Will bypass the automatic filtering of indirect dependencies found in node_modules. Please refer Highlight Automated Code Scan (Command Line)
Also use the latest CLI
Related Articles
CAST HIGHLIGHT - SCA - Python - Dependencies are not getting detected
CAST HIGHLIGHT - CLI - Files Supported for Dependency Discovery in Python
Additional Resources
CAST Highlight Troubleshooting Guides
CAST Highlight Product Documentation
Ticket
50387
Comments