dependency-check / dependency-check/DependencyCheck
keep the npm dependencies flag 'Dev'
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
the dependency-report doesn't keep this signifiant information in generated report.
my ```package-lock.json```
```json
"node_modules/@babel/helper-remap-async-to-generator": {
"version": "7.14.5",
"resolved": "http://localhost:8001/nexus/repository/npmjs_registry/@babel/helper-remap-async-to-generator/-/helper-remap-async-to-generator-7.14.5.tgz",
"integrity": "sha512-rLQKdQU+HYlxBwQIj8dk4/0ENOUEhA/Z0l4hN8BexpvmSMN9oA9EagjnhnDpNsRdWCfjwa4mn/HyBXO9yhQP6A==",
"dev": true,
"license": "MIT",
"dependencies": {
"@babel/helper-annotate-as-pure": "^7.14.5",
"@babel/helper-wrap-function": "^7.14.5",
"@babel/types": "^7.14.5"
},
"engines": {
"node": ">=6.9.0"
}
},
```
the dependency-report
```json
{
"isVirtual": false,
"fileName": "@babel/helper-remap-async-to-generator:7.14.5",
"filePath": "/home/data/node_modules/@babel/helper-remap-async-to-generator/package.json",
"md5": "111eff9a9c13b6d30a74eb0e2c4ac521",
"sha1": "a84845559256282a7a74a176ded9f3f69c3a5a88",
"sha256": "c54113806963e886d6395c16edb4f85f9efa68bb2326b6b6939d1dde2f6ddeac",
"description": "Helper function to remap async functions to generators",
"license": "MIT",
"projectReferences": [
"peps-pa-webv2:0.0.0"
],
"evidenceCollected": {
"vendorEvidence": [
{
"type": "vendor",
"confidence": "HIGHEST",
```
The 'Dev' attribut would be usefull to filter the report.
Contributor guide
Assessment
This issue has not been assessed yet.