search

snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
59 stars 28 forks source link

chore: use official parser for yarn lock v1 #158

Closed JamesPatrickGill closed 2 years ago

JamesPatrickGill commented 2 years ago

This is a follow on from release of https://github.com/snyk/nodejs-lockfile-parser/pull/149

This PR may have attempted too much. The consumption of the yarn.lock ended up being somewhat less performant than previous, this part has been swapped back but the new graph building remains. See below table for data.

Small Project Regular Project Large Project
Old Implementation ~25ms ~100ms ~550ms
Current Release ~3ms ~80ms ~1600ms
This Pr ~5ms ~25ms ~85ms