Skip to content

Ensure we can collect the latest package-lock.json including file indirections for versions #3493

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
pombredanne opened this issue Aug 19, 2023 · 1 comment

Comments

@pombredanne
Copy link
Member

Short Description

There are some features we may not support in https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true

@AyanSinhaMahapatra
Copy link
Member

From #3981 (review)

We want to:

  1. look at all the new features in these lockfile spec, and for each one of them for example see the differences between https://docs.npmjs.com/cli/v10/configuring-npm/package-lock-json and https://docs.npmjs.com/cli/v6/configuring-npm/package-lock-json (you can do a diff for the texts, and do this for other versions of the documentation)
  2. add test examples for these by using the github search, add tests like the ones at https://github.com/aboutcode-org/scancode-toolkit/blob/develop/tests/packagedcode/test_npm.py#L253
  3. update the package-lock.json parser at https://github.com/aboutcode-org/scancode-toolkit/blob/develop/src/packagedcode/npm.py#L793 to parse and store the additional info

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
2 participants