What does the Dependency Review/Graph feature provide?

• A. It analyzes code for syntax errors only.
• B. It manages user access control and permissions.
• C. It tracks license compliance only.
• D. It analyzes dependencies to surface known vulnerabilities and provides a graph of dependencies.

Answer: (D)

Dependency Review/Graph focuses on visibility and security risk of what your project uses. It analyzes the project’s dependencies (direct and transitive) and checks them against vulnerability databases to surface known issues, then presents a graph that shows how all those dependencies relate to each other. This helps you understand which components could be risky, how an upgrade might affect downstream packages, and where to take action to remediate. It’s not about checking code syntax, managing access, or tracking licenses in isolation—the core value is mapping dependencies and exposing security concerns so you can address them before merging.