1. Launch the black-duck dashbord.
- Dev_code_snp-category: This is for non-prod scan
- main: This is for the prod scan
2. Check the reference tree of the specific package
npm ls <package>
3. Select the top-level package, and check it in the snkyk.io
In this example, the gulp package cannot find a non-vulnerabilities package, so we need to fix it manually in the dashboard.