### Discussed in https://github.com/aquasecurity/trivy/discussions/5208 `.deps.json` files have `target` array with information about child dependencies. We can use it to build dependency tree.