[ ] All tests passed. If this feature is not already covered by the tests, I added new tests.
[ ] I used npm run format for formatting the code before submitting the pull request.
This pull request fixes the issue where yarn dependencies were receiving an incorrect 'npm' type, resulting in no diagnostics or autofix. The underlying problem stems from the fact that Xray's response for yarn vulnerable dependencies was type as 'npm,' and this was applied to each vulnerable yarn dependency.
To address this, the vulnerable package type is now extended from the root project identified by the extension.
[ ] I used
npm run formatfor formatting the code before submitting the pull request.This pull request fixes the issue where yarn dependencies were receiving an incorrect 'npm' type, resulting in no diagnostics or autofix. The underlying problem stems from the fact that Xray's response for yarn vulnerable dependencies was type as 'npm,' and this was applied to each vulnerable yarn dependency.
To address this, the vulnerable package type is now extended from the root project identified by the extension.