CAST HIGHLIGHT - SCA - Cannot detect the trace of dependency of a JS component

The portal and BOM report says that the third party  “electron-to-chromium” component, is a dependency, but when the code is searched there is no reference. 

Solution

Look into .json or yarn.lock files, the files that references dependencies in JS.

For “electron-to-chromium” component reference is found  in Yarn.lock file.

The yarn.lock file confirms the download of the dependency.

Additional Resources

CAST Highlight Troubleshooting Guides

CAST Highlight Product Documentation

Ticket Number

# 22248