Difference between a Library and Dependency

[ShubhamPalriwala]

I resumed back my work on adding the feature for --include-dev-dependencies for Trivy and have decided that this will be the place to start as to enable the Dev bool for each depndency that is parsed.

However, I'm currently confused a bit with the difference between a Library and a Dependency in context to this package.

• A library is defined here in types.go/#L5-L12
• A dependency is defined here in types.go/#L19-L22

My interpretation till now is:
A library is the current library we are parsing and a dependency is all the external libraries that this library is dependent upon.

Another confusion that I'm having is, inside any language/framework directory, there's another type definition for a Dependency as for example here in nodejs/npm/parse.go

Would like to know if I am correct/ and if not would kindly request help here. Also, it would be really helpful if I could get some feedback if I'm on the correct place for adding a Dev bool flag in the Library type in the same file as hyperlinked above as.