fix: pass includePeerDeps instead of a whole lockfile

snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file

Other

59 stars 28 forks source link

fix: pass includePeerDeps instead of a whole lockfile #118

Closed lili2311 closed 3 years ago

lili2311 commented 3 years ago

[x] Tests written and linted
[ ] Documentation written / README.md updated https://snyk.io/docs/snyk-for-node/
[x] Follows CONTRIBUTING agreement
[x] Commit history is tidy https://git-scm.com/book/en/v2/Git-Branching-Rebasing
[x] Reviewed by Snyk team

What this does

Instead of passing an entire lockfile to a function that only uses it to decide if we need to grab peer deps, do this calculation upfront and optionally allow grabbing peer deps. This also allows for future support of --peer

snyksec commented 3 years ago

:tada: This PR is included in version 1.36.1 :tada:

The release is available on:

npm package (@latest dist-tag)
GitHub release

Your semantic-release bot :package::rocket: