Dependency Scanning
In plain terms
Checking third-party libraries for known vulnerabilities.
Going deeper
Dependency scanning inspects an app's open-source and third-party components against vulnerability databases to flag risky versions. It guards the supply chain.
Under the hood
Software Composition Analysis (SCA) tools alert on vulnerable transitive dependencies too.
Examples
Snyk, Dependabot, npm audit, SCA, Log4Shell detection, SBOM.
Think of it like...
Like checking every supplier's part against a recall list before assembly.