03 / Dependency intelligence
UnderStory.
Trace the shortest path from an application you own to vulnerable code you did not write.
Scope
Full-stack take-home project
Built with
Next.js · TypeScript · CognoDB · openCypher
UnderStory models a software organisation's dependency estate as a graph. It makes paths visible: which applications reach an advisory, how they get there, and where one change could cut several exposures.
02 / The challenge
Make the complex clear.
Dependency lists show membership, but security questions need complete routes, reachability, and the intersections between them.
03 / The approach
Design and implementation.
The application uses CognoDB and openCypher to power blast-radius views, route tracing, cut points, maintainer chokepoints, and licence exposure. The interface renders those answers as legible ledgers and path diagrams.
04 / In the build
- 01Demo graph: 12 applications and 2,501 releases
- 029,618 dependency edges modelled
- 03Shortest paths, cut points, maintainer risk, and licences
Next project / 04Axiom AI