Skip to content

Commit 8680725

Browse files
authored
Apply suggestions from code review
Co-authored-by: Tim Bastin <38261809+timbastin@users.noreply.github.com>
1 parent 9f3107c commit 8680725

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/pages/explanations/supply-chain-security/transitive-vulnerability-path-analysis.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -121,14 +121,14 @@ The algorithm downloads the package metadata and asks: "What does this version r
121121
The answer comes in the form of a version constraint, like:
122122
- "version 4.3.0 or higher"
123123
- "version 4.3 compatible versions"
124-
- "version 4 specifically"
124+
- "Anything that has major version 4"
125125

126126
### Step 4: Find the Best Matching Version
127127

128128
Given that constraint ("4.3.0 or higher"), look at all available versions in the registry.
129129

130130
The algorithm picks the highest version that satisfies the constraint. In this case, if versions 4.3.0, 4.3.1, 4.4.0, 4.5.1, and 5.0.0 exist, it would pick 4.5.1 because:
131-
- It's the latest version available
131+
- It's the latest version available in the **same** major release
132132
- It still satisfies "4.3.0 or higher"
133133
- It doesn't break the requirement
134134

0 commit comments

Comments
 (0)