librariesio / bibliothecary

:notebook_with_decorative_cover: Libraries.io Package Manager Manifest Parsers
https://libraries.io/rubygems/bibliothecary
GNU Affero General Public License v3.0
89 stars 36 forks source link

Parsers::NPM: handle dependencies on local paths in lockfiles #592

Closed mpace965 closed 4 months ago

mpace965 commented 4 months ago

This PR changes Parsers::NPM so that it reports dependencies with local path requirements in package.json manifests, package-lock.json (v2 or above), and yarn.lock lockfiles. It does so by adding a boolean-valued local key to the output.

It also de-dupes local path requirements from package-lock.json lockfiles, where they have two different entries.