US 12,423,073 B2
Software component dependency tracker
David P. Bendert, Charlotte, NC (US); Jason Franklin Frye, Monroe, NC (US); Maximilian Fuchs, Charlotte, NC (US); Jennifer Marie Giannoulis, Waxhaw, NC (US); Magesh Punniyamoorthy, Charlotte, NC (US); and Matthew O. Spain, Charlotte, NC (US)
Assigned to Wells Fargo Bank, N.A., San Francisco, CA (US)
Filed by Wells Fargo Bank, N.A., San Francisco, CA (US)
Filed on Apr. 4, 2023, as Appl. No. 18/295,554.
Prior Publication US 2024/0338184 A1, Oct. 10, 2024
Int. Cl. G06F 8/41 (2018.01)
CPC G06F 8/433 (2013.01) 17 Claims
OG exemplary drawing
 
1. A method for tracking software component dependencies, the method comprising:
identifying a dependency tree of a first software component, the dependency tree comprising a plurality of nodes representing other software components and edges representing dependencies between nodes;
identifying versions of dependencies in the dependency tree currently used by the first software component;
tracking a status of each particular dependency of the dependencies in the dependency tree based upon communications with an external computing service, the status determined based upon one or more of whether there is an availability of an updated version of the particular dependency or a presence of a vulnerability of a version of the particular dependency used by the first software component;
causing display of a graphical user interface (GUI) including the dependency tree, the versions of dependencies, and the status of each particular dependency;
identifying that a first dependency of the dependency tree is assigned a component importance level that is a lower level than a level assigned to the first software component; and
responsive to identifying that the first dependency of the dependency tree is assigned the component importance level that is a lower level than the level assigned to the first software component, notifying a user.