snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
56 stars 28 forks source link

fix: accept optional workspace args to parse yarn2 workspace repos #193

Closed JamesPatrickGill closed 1 year ago

JamesPatrickGill commented 1 year ago

This allows the option to pass some additional context to the depgraph builder around workspaces to help it more accurately parse them. In this case our main addition is the root resolutions which allows us to pass the resolutions from the root pkgJson so that we can correctly resolve them without this file.

snyksec commented 1 year ago

:tada: This PR is included in version 1.51.1 :tada:

The release is available on:

Your semantic-release bot :package::rocket: