search

phylum-dev / cli

Command line interface for the Phylum API
https://phylum.io
GNU General Public License v3.0
101 stars 10 forks source link

Fix package-lock.json lockfile parsing failures #1467

Closed cd-work closed 1 month ago

cd-work commented 1 month ago

This fixes an issue where the lockfile parser for JavaScript's package-lock.json was too restrictive and would fail parsing valid lockfiles.

As a solution all packages without explicit resolved field are now ignored, since these are the only packages we're capable of analyzing anyway.