Description

BREAKING CHANGE Add support for parsing npm package-lock.json lockfiles

Types of changes

[ ] Bug fix (non-breaking change which fixes an issue)
[x] New feature (non-breaking change which adds functionality)
[x] Breaking change (fix or feature that would cause existing functionality to change)

Related Issue

Motivation and Context

This has been a TBD for a while but we surely need to support npm's lockfile for policy and trust checking.

How Has This Been Tested?

Multiple unit and integration tests. Still room for more unit tests around the new flattening array for npm's lockfile.

Screenshots (if appropriate):

Checklist:

[ ] I have updated the documentation (if required).
[x] I have read the CONTRIBUTING document.
[x] I have added tests to cover my changes.
[ ] All new and existing tests passed.
[ ] I added a picture of a cute animal cause it's fun

Codecov Report

Merging #2 into master will decrease coverage by 30.11%. The diff coverage is 51.35%.

@@             Coverage Diff             @@
##           master       #2       +/-   ##
===========================================
- Coverage   95.29%   65.17%   -30.12%     
===========================================
  Files           7        5        -2     
  Lines          85      112       +27     
  Branches       12       18        +6     
===========================================
- Hits           81       73        -8     
- Misses          4       34       +30     
- Partials        0        5        +5

Impacted Files	Coverage Δ
packages/lockfile-lint-api/src/ParseLockFile.js	`0% <0%> (-100%)`	:arrow_down:
packages/lockfile-lint-api/index.js	`100% <100%> (ø)`	:arrow_up:
packages/lockfile-lint-api/src/ParseLockfile.js	`97.36% <97.36%> (ø)`
packages/lockfile-lint/src/cli.js
packages/lockfile-lint/src/main.js

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 1c96a6e...242c1c8. Read the comment docs.

lirantal / lockfile-lint

Feat: Support npm lockfile parsing #2