snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
57 stars 28 forks source link

fix: handles npm lock v2 bundled dependencies #176

Closed JamesPatrickGill closed 1 year ago

JamesPatrickGill commented 1 year ago

This adds support for bundled dependencies inside of npm-lock-v2 projects. Previously these would be flagged as missing in lockfile.

snyksec commented 1 year ago

:tada: This PR is included in version 1.47.3 :tada:

The release is available on:

Your semantic-release bot :package::rocket: