See common 3rd party dependencies between workspace packages

[jrschumacher]

I want to visualize common 3rd party deps, so I can see which deps are lynch pins and eliminate one-off deps to reduce supply chain attacks.

---

I saw that in antoine-coulon/skott advanced dependency graph functionality not found in rush-plugin-skott. Is it trivial to update to the latest skott and get those features?

[antoine-coulon]

Hey @jrschumacher,

Just want to be sure, when you're talking about 3rd party dependencies visualisation you talk about 3rd party dependencies by project? skott does actually implement that but each 3rd party dep is attached to a single JS/TS module, the goal with Krush would be to provide a visualisation but per Rush project instead of per module.

If you're talking about that specifically (Rush integration) the work was already started by me in the past but was not released because it was requiring upstream work on skott side and I unfortunately hadn't the time to do so (I was focused on releasing skott related features, such as the brand new release of the web app). Given I'm lately investing time again for Rush's ecosystem and that skott is pretty stable, I might end up releasing all this by the end of the month.

[antoine-coulon]

Note also that I'm interesting in collecting feedback if you are willing to rely on the plugin for your Rush setup in the future :)