Dependency Chain Security

A core concept in software supply chain security that focuses on the version constraints, update records and known vulnerability advisories of a project's dependency libraries. It emphasizes auditing the entire dependency chain rather than merely confirming the core version number.