search

snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
59 stars 28 forks source link

fix: fail early for top level deps out of sync pnpm and updated tests #249

Closed gemaxim closed 1 month ago

gemaxim commented 1 month ago

What this does

We should throw OutOfSync early if top level deps were not found in extracted lockfile packages.

Updated tests for pnpm/npm/yarn: we shouldn't use try-catch to test a failing scenario because if if the function doesn't fail as expected the test still passes

snyksec commented 1 month ago

:tada: This PR is included in version 1.58.9 :tada:

The release is available on:

Your semantic-release bot :package::rocket: