snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
56 stars 28 forks source link

fix: stop assumption that local pkgs are in workspaces #211

Closed JamesPatrickGill closed 7 months ago

JamesPatrickGill commented 7 months ago

What this does

This fixes a regression introduced by this change https://github.com/snyk/nodejs-lockfile-parser/compare/v1.52.2...v1.52.3 where an assumption was made that we would always have a workspace object in the lockfile when we have a link in dependency data.

snyksec commented 7 months ago

:tada: This PR is included in version 1.52.6 :tada:

The release is available on:

Your semantic-release bot :package::rocket: