See also: All about SBOMs: the latest moves to secure the software supply chain Transitive dependencies - additional code that may be called by a third-party dependency - are not listed in the ...