snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
57 stars 28 forks source link

feat: add "straight to depgraph" fn for yarnlock v1 #140

Open JamesPatrickGill opened 2 years ago

JamesPatrickGill commented 2 years ago

Better description coming in future

Basically a WIP implementation of a procedural approach to getting a dep-graph from a lock-file, it skips the dep-tree entirely. And IMO is much easier to read and reason about as well as easier to add logic to.

Caveats (...so far):

github-actions[bot] commented 2 days ago

Your PR has not had any activity for 60 days. In 7 days I'll close it. Make some activity to remove this.