search

naugtur / npm-audit-resolver

Apache License 2.0
121 stars 28 forks source link

Added support for pnpm package manager #33

Open ujjwalgarg1995 opened 3 years ago

ujjwalgarg1995 commented 3 years ago

This PR is too add support for PNPM package manager.

naugtur commented 3 years ago

Thanks! I should have included pnpm a long time ago.

IS it really that similar to npm? If so, I don't see the point in copy-pasting the code, I'd just add the missing 'p' conditionally to the commands form the original implementation.

ujjwalgarg1995 commented 3 years ago

@naugtur in last 5 months, I haven't seen any difference in NPM and PNPM commands.

bFerry-xealth commented 6 months ago

@naugtur This appears to be dead, what can I do to get this moving again?

npm audit --json --omit=dev

{
  "auditReportVersion": 2,
  "vulnerabilities": {},
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 0,
      "critical": 0,
      "total": 0
    },
    "dependencies": {
      "prod": 415,
      "dev": 987,
      "optional": 123,
      "peer": 84,
      "peerOptional": 0,
      "total": 1455
    }
  }
}

pnpm audit --json --prod

{
  "actions": [],
  "advisories": {},
  "muted": [],
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 0,
      "critical": 0
    },
    "dependencies": 372,
    "devDependencies": 0,
    "optionalDependencies": 0,
    "totalDependencies": 372
  }
}