snyk / nodejs-lockfile-parser

Generate a Snyk dependency tree from package-lock.json or yarn.lock file
Other
59 stars 28 forks source link

feat: optimised yarn depTree #93

Closed admons closed 3 years ago

admons commented 3 years ago

What this does

Creates an optimised dep-tree version for yarn by reusing package-lock logic I extracted everything that is shared from package-lock-parser into lock-parser-base

The implications for that ticket is ~220 million nodes for around 900 dependencies

Before this change, yarn projects looks like the right tree while npm projects looks like the left one image

snyksec commented 3 years ago

:tada: This PR is included in version 1.31.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket: