dependency-check / dependency-check/DependencyCheck
Add a flag to allow user bypass `npm install` check for node.js codes
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
Currently we will have
```
final File nodeModules = new File(baseDir, "node_modules");
if (!nodeModules.isDirectory()) {
LOGGER.warn("Analyzing `{}` - however, the node_modules directory does not exist. "
+ "Please run `npm install` prior to running dependency-check", dependencyFile.toString());
return;
}
```
Can we add a flag like `analyzer.node.install.check` = false to just Warn this message out but not stop the check moving on? like:
```
final File nodeModules = new File(baseDir, "node_modules");
if (!nodeModules.isDirectory()) {
LOGGER.warn("Analyzing `{}` - however, the node_modules directory does not exist. "
+ "Please run `npm install` prior to running dependency-check", dependencyFile.toString());
if (!Settings.KEYS.ANALYZER_NODE_INSTALL_CHECK) {
return;}
}
```
Contributor guide
Assessment
This issue has not been assessed yet.