docs: improve documentation

jeremylong · Aug 7, 2023 · 424858f · 424858f
1 parent cdf692b
commit 424858f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -5,6 +5,8 @@ Slightly malicious dependency ([analyzer/spring-build-analyzer](analyzer)) and a
 * The `analyzer` is a multi-module maven build controlled by a threat actor.
 * The `demo` application is a sample application that could have been written by developers at your organitzation.
 
+**TL;DR** - the `analyzer` is a compile time dependency, but could have been a build plugin or test scoped dependency, that injects a backdoor into any spring-boot application built.
+
 ## demonstration
 
 **The project requires Maven and Java 17.**