snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
59 stars 28 forks source link

fix: allow yarn 2 resolutions when strict mode is disabled #102

Closed JamesPatrickGill closed 3 years ago

JamesPatrickGill commented 3 years ago

What this does

Yarn 2 resolutions breaks snyk test. See #99 for details. This PR unblocks consumers that have yarn 2 resolutions when --strict-out-of-sync=false is passed to the Snyk CLI.

Notes for the reviewer See additional test case for yarn 1 and yarn 2` resolutions.

JamesPatrickGill commented 3 years ago

Hi, full support for resolutions in yarn2 has been introduced in v1.35 of this parser via this PR.

It is included in version 1.616.0 of the CLI 🎉

Closing this PR as a result, thank you for your contribution and insight into this problem 😃