Open 43081j opened 2 months ago
We could add functionality to also scan package-lock.json (and similar lock files from other runtimes, like pnpm).
package-lock.json
When doing this, we could warn that you have a dependency which deeply depends on a target module.
Some basic requirements:
package.json
We could add functionality to also scan
package-lock.json(and similar lock files from other runtimes, like pnpm).When doing this, we could warn that you have a dependency which deeply depends on a target module.
Some basic requirements:
package.jsonscanning but with a more lenient warning since it may not be actionable