OSPS-QA-02 Publish Software Dependencies (maturity levels 1, 2, 3). Requirement: When the package management system supports it, the source code repository MUST contain a dependency list that accounts for the direct language dependencies. Objective of the control: Provide transparency and accountability for the project's dependencies while enabling users and contributors to understand the software's direct dependencies. Recommendation: This may take the form of a package manager or language dependency file that enumerates all direct dependencies such as package.json, Gemfile, or go.mod.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.