feat: normalize pnpm importers on parse - Githubissues

snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file

Other

56 stars 28 forks source link

feat: normalize pnpm importers on parse #222

Closed JamesPatrickGill closed 1 month ago

JamesPatrickGill commented 1 month ago

[ ] Tests written and linted
[ ] Documentation written / README.md updated https://snyk.io/docs/snyk-for-node/
[ ] Follows CONTRIBUTING agreement
[ ] Commit history is tidy https://git-scm.com/book/en/v2/Git-Branching-Rebasing
[ ] Reviewed by Snyk team

What this does

The parser for pnpm lockfiles now normalises the importers object on construction/parse. This is useful for inspecting information around packages in a workspace without multiple parsers.

If not a workspace lockfile then the importers will be empty and the importers field on the parser will be an empty object.

Notes for the reviewer

Instructions on how to run this locally, background context, what to review, questions…

More information

[SC-XXXX]()
[Link to documentation]()

Screenshots

Visuals that may help the reviewer

snyksec commented 1 month ago

:tada: This PR is included in version 1.54.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: