dependency-analysis-patterns

name	dependency-analysis-patterns
description	Dependency graph visualization, circular dependency detection, CVE scanning, and license compliance

Dependency Analysis Patterns

Dependency Graph Visualization

# npm
npx depcruise --output-type dot src/ | dot -T svg > deps.svg

# Python
pipdeptree --graph-output svg > deps.svg

# Go
go mod graph | modgraphviz | dot -T svg > deps.svg

Circular Dependency Detection

# JavaScript/TypeScript
npx madge --circular src/
npx dpdm --circular src/index.ts

# Python
pydeps --cluster --no-show src/

Fix Strategies

Circular Tip	Çözüm
A → B → A	Interface/port ile inversion
A → B → C → A	Shared module extract et
Barrel file circular	Direct import kullan

CVE Scanning

# npm
npm audit --json | jq '.vulnerabilities | to_entries[] | select(.value.severity == "critical")'

# pip
pip-audit --format json --desc

# Go
govulncheck ./...

# Multi-tool
trivy fs --severity CRITICAL,HIGH .

CVE Prioritization

CVSS	Severity	Aksiyon	SLA
9.0+	Critical