What is dependency vulnerability management?

Dependency vulnerability management tracks third-party packages, libraries, images, and transitive dependencies for known security issues and applies updates or mitigations based on actual exposure and risk. It is an ongoing software supply-chain practice.