Direct Dependencies use Audit Sources in PM UI (#6806)

donnie-msft · web-flow · commit 3ca873361826 · 2025-09-26T12:33:48.000-07:00
diff --git a/src/NuGet.Clients/NuGet.PackageManagement.UI/Models/Package/PackageModelFactory.cs b/src/NuGet.Clients/NuGet.PackageManagement.UI/Models/Package/PackageModelFactory.cs
@@ -32,18 +32,17 @@ public PackageModel Create(PackageSearchMetadataContextInfo metadata, ContractIt
             }
 
             EmbeddedResourcesCapability embeddedResources = new EmbeddedResourcesCapability(_packageFileService, metadata.Identity!, metadata.ReadmeUrl);
+            IVulnerableCapable vulnerableCapability = new VulnerableDatabaseCapability(_packageVulnerabilityService, metadata.Identity!);
 
             if (metadata.TransitiveOrigins != null)
             {
-                IVulnerableCapable vulnerableDatabaseCapability = new VulnerableDatabaseCapability(_packageVulnerabilityService, metadata.Identity!);
-                return CreateTransitivelyReferencedPackageModel(metadata, vulnerableDatabaseCapability, embeddedResources);
+                return CreateTransitivelyReferencedPackageModel(metadata, vulnerableCapability, embeddedResources);
             }
             else
             {
                 if (metadata.PackagePath != null)
                 {
                     PackageMetadataRetrievalAdapter packageMetadataRetrievalAdapter = new PackageMetadataRetrievalAdapter(_searchService, metadata.Identity!, _packageSources, _includePrerelease);
-                    IVulnerableCapable vulnerableCapability = new VulnerablePackageMetadataCapability(packageMetadataRetrievalAdapter);
 
                     if (itemFilter.Equals(ContractItemFilter.All))
                     {
@@ -57,7 +56,6 @@ public PackageModel Create(PackageSearchMetadataContextInfo metadata, ContractIt
                 {
                     PackageMetadataRetrievalAdapter packageMetadataRetrievalAdapter = new PackageMetadataRetrievalAdapter(_searchService, metadata.Identity!, _packageSources, _includePrerelease);
                     IDeprecationCapable deprecationCapable = new DeprecationPackageMetadataCapability(packageMetadataRetrievalAdapter);
-                    VulnerablePackageMetadataCapability vulnerableCapability = new VulnerablePackageMetadataCapability(packageMetadataRetrievalAdapter);
 
                     if (metadata.IsRecommended)
                     {

Original file line number	Diff line number	Diff line change
`@@ -32,18 +32,17 @@ public PackageModel Create(PackageSearchMetadataContextInfo metadata, ContractIt`
`32`	`32`	`}`
`33`	`33`
`34`	`34`	`EmbeddedResourcesCapability embeddedResources = new EmbeddedResourcesCapability(_packageFileService, metadata.Identity!, metadata.ReadmeUrl);`
	`35`	`+ IVulnerableCapable vulnerableCapability = new VulnerableDatabaseCapability(_packageVulnerabilityService, metadata.Identity!);`
`35`	`36`
`36`	`37`	`if (metadata.TransitiveOrigins != null)`
`37`	`38`	`{`
`38`		`- IVulnerableCapable vulnerableDatabaseCapability = new VulnerableDatabaseCapability(_packageVulnerabilityService, metadata.Identity!);`
`39`		`- return CreateTransitivelyReferencedPackageModel(metadata, vulnerableDatabaseCapability, embeddedResources);`
	`39`	`+ return CreateTransitivelyReferencedPackageModel(metadata, vulnerableCapability, embeddedResources);`
`40`	`40`	`}`
`41`	`41`	`else`
`42`	`42`	`{`
`43`	`43`	`if (metadata.PackagePath != null)`
`44`	`44`	`{`
`45`	`45`	`PackageMetadataRetrievalAdapter packageMetadataRetrievalAdapter = new PackageMetadataRetrievalAdapter(_searchService, metadata.Identity!, _packageSources, _includePrerelease);`
`46`		`- IVulnerableCapable vulnerableCapability = new VulnerablePackageMetadataCapability(packageMetadataRetrievalAdapter);`
`47`	`46`
`48`	`47`	`if (itemFilter.Equals(ContractItemFilter.All))`
`49`	`48`	`{`
`@@ -57,7 +56,6 @@ public PackageModel Create(PackageSearchMetadataContextInfo metadata, ContractIt`
`57`	`56`	`{`
`58`	`57`	`PackageMetadataRetrievalAdapter packageMetadataRetrievalAdapter = new PackageMetadataRetrievalAdapter(_searchService, metadata.Identity!, _packageSources, _includePrerelease);`
`59`	`58`	`IDeprecationCapable deprecationCapable = new DeprecationPackageMetadataCapability(packageMetadataRetrievalAdapter);`
`60`		`- VulnerablePackageMetadataCapability vulnerableCapability = new VulnerablePackageMetadataCapability(packageMetadataRetrievalAdapter);`
`61`	`59`
`62`	`60`	`if (metadata.IsRecommended)`
`63`	`61`	`{`