---
title: SAIF.Business.View.Provider dependencies
summary: Internal and external dependencies for this library.
status: draft
owner: SAIF Doc Gen
last_reviewed: 2026-08-21
library: SAIF.Business.View.Provider
reference_type: embedded
---

# SAIF.Business.View.Provider dependencies

## Internal dependencies

**Zero same-repo `<ProjectReference>` entries.** `SAIF.Business.View.Provider.vbproj` contains no `<ProjectReference>` elements — the library is a member of `LegalMaintenance.sln` but resolves all dependencies as binary `<Reference>` entries against `..\packages\`, and is consumed by sibling projects through the packaged assembly `SAIF.BOF.Business.View.Provider` 2.0.23139.2, not through a project reference.* Its internal dependencies are the organizational SAIF NuGet packages below.

| Dependency | Reference Type | Usage |
| --- | --- | --- |
| `SAIF.BOF.Business` (`SAIF.Business.dll`) | NuGet Package | `clsBusinessBase`, `clsBusinessCollection(Of T)`, `clsAddress`, `clsName`, `clsPhone`, `clsUpdateInfo`, `clsConstants`, `SqlHelper.ResultSetQuery`, `MCOPlanInfo`/`GetMCOInfo`, `iPayee` |
| `SAIF.BOF.Framework` (Core, Connection, Security, Logging, Mail, DNS, Bindable, Security.EnvironmentApi) | NuGet Package | Core assembly used directly — `IDataPortalInfo`, `IPortalRequest`, `IDataRequest`, `IBusinessCriteria`, `clsRetrieveOnlyBusinessCriteria`, `clsSAIFDataReader`, `clsResultSet`, `clsSmartString`, `clsSmartDate`, `clsSmartDecimal`, `RuleData`, `clsRuleArgs`, `RuleCheckLevel`, `DataRequestType`; other referenced framework assemblies are not used directly by this library's source* |
| `SAIF.BOF.ResourceFiles` | NuGet Package | Referenced by the project; no direct API use found in source** |
| `SAIF.Framework.Common` | NuGet Package | Referenced by the project; no direct API use found in source** |
| `SAIF.HashUtil` | NuGet Package | Referenced by the project; no direct API use found in source** |
| `SAIF.Legacy.BankValidator` | NuGet Package | Referenced by the project; no direct API use found in source** |
| `SAIF.Web.API.Clients` | NuGet Package | Referenced by the project; no direct API use found in source** |
| `ImagingAPI.Client`, `PdfAPI.Client` | NuGet Package | Referenced by the project; no direct API use found in source** |

## External dependencies
| Dependency | Version | Usage |
| --- | --- | --- |
| `Oracle.ManagedDataAccess` | 21.5.0 | Registered as `DbProviderFactory` in `app.config`/`Web.config`; no direct API use in source |
| `Autofac`, `FluentValidation`, `log4net`, `Newtonsoft.Json`, `RestSharp`, `iTextSharp` | see `packages.config` | Transitive/build-closure references; no direct API use found in source** |
| `Microsoft.AspNet.WebApi.*`, `System.Text.Json`, `System.Memory`, `System.Buffers`, `System.ValueTuple`, `System.Numerics.Vectors`, `System.Runtime.CompilerServices.Unsafe`, `System.Text.Encodings.Web`, `System.Threading.Tasks.Extensions`, `Microsoft.Bcl.AsyncInterfaces` | see `packages.config` | Framework/runtime support; no direct API use found in source** |

## Dependency risks and notes
- `clsProviderCollection.Criteria.BuildSQLWhere` builds SQL by string concatenation for tax-ID lists and caller-supplied WHERE clauses, which is unparameterized SQL — a potential injection path if a caller passes untrusted input (see [BR-PRV-003](business-rules.md#br-prv-003-provider-set-retrieval-uses-unparameterized-sql)).
- The library declares no `<ProjectReference>` dependencies; consumers within this repository (`LegalMaintenance`, `SAIF.Application.Claim.Legal`, `SAIF.Business.Claim.Legal`, `SAIF.Application.Claim`, `SAIF.Business.Tasks.Claim`) instead consume it as the packaged assembly `SAIF.BOF.Business.View.Provider` 2.0.23139.2, which is produced by a different repository's pipeline, not by this one.
- Several referenced packages (`SAIF.BOF.ResourceFiles`, `SAIF.Framework.Common`, `SAIF.HashUtil`, `SAIF.Legacy.BankValidator`, `SAIF.Web.API.Clients`, and the full transitive/build-closure list) show no direct API use in source; their necessity to this library specifically is unconfirmed.**
- The generated typed DataSet `Institutions` (paired with the `SAIF.Legacy.BankValidator` reference) is compiled into the assembly but unreferenced by any other type in the library, suggesting residual scaffolding.*

## Related documentation
- [Index](index.md)
- [Overview](overview.md)
- [Architecture](architecture.md)
- [Operations and processes](operations-processes.md)
- [Business rules](business-rules.md)
- [Database tables](database-tables.md)
- [SQL catalog](sql/index.md)
- [API reference](api/index.md)

> **Note:** Statements marked with * were inferred from code structure, naming conventions, or
> contextual evidence where direct confirmation was not available in source artifacts. Statements
> marked with ** could not be confirmed; treat as unknown until verified.

## Sources
- `SAIF.Business.View.Provider/SAIF.Business.View.Provider.vbproj`
- `SAIF.Business.View.Provider/packages.config`
- `SAIF.Business.View.Provider/app.config`
- `SAIF.Business.View.Provider/Web.config`
- `SAIF.Application.Claim/SAIF.Application.Claim.vbproj`
- `SAIF.Application.Claim.Legal/SAIF.Application.Claim.Legal.vbproj`
- `SAIF.Application.Claim.Legal/LegalManagerBase.vb`
- `SAIF.Application.Claim.Legal/LegalNet/clsCaseCostManager.vb`
- `SAIF.Application.Claim.Legal/LegalNet/clsRequestManager.vb`
- `SAIF.Business.Claim.Legal/SAIF.Business.Claim.Legal.vbproj`
- `SAIF.Business.Claim.Legal/LegalNet/clsCaseCost.vb`
- `SAIF.Business.Tasks.Claim/SAIF.Business.Tasks.Claim.vbproj`