Transitive Dependency

A package that is not directly declared in a project but is depended upon by a direct dependency. Changes in its behavior do not appear in the project's package.json yet may surface at runtime. The lockfile fixes the resolution result of the entire dependency tree.