snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
56 stars 28 forks source link

fix: apply bundle only resolution to every pkg key #186

Open JamesPatrickGill opened 1 year ago

JamesPatrickGill commented 1 year ago

Previously logic around parent permutations when scoping pkg keys in the package-lock file was restriced to packages that where bundled only. This was an incorrect assumption and this extends this logic to every pkg albeit using the project root as the base parent opposed to the bundle root.