While using the API for pulling third party component report which includes the origin column, user is not able to see the name of the primary component for the dependency component.
Details
For the API "According to user's permission, returns application thirdparties" user is able to see only the name of the dependency component.
This means that "hoek" has been detected from a dependency file of the application (e.g. package.json).
User can retrieve the path to this package.json (or in other technologies pom.xml, .csproj, etc.) by looking at frameworks_validated.csv uploaded for this application. This information is not displayed on the portal's UI.
In this example user should search in
- open frameworks_validated.csv file(s) and search for "hoek"
Ticket
29559
Comments