dependency-check / dependency-check/DependencyCheck

keep the npm dependencies flag 'Dev'

Open
#3,559 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
7.7k
Forks
1.4k
Avg merge
9d 22h
Merged PRs (30d)
13

Description

the dependency-report doesn't keep this signifiant information in generated report.

my ```package-lock.json```
```json
"node_modules/@babel/helper-remap-async-to-generator": {
"version": "7.14.5",
"resolved": "http://localhost:8001/nexus/repository/npmjs_registry/@babel/helper-remap-async-to-generator/-/helper-remap-async-to-generator-7.14.5.tgz",
"integrity": "sha512-rLQKdQU+HYlxBwQIj8dk4/0ENOUEhA/Z0l4hN8BexpvmSMN9oA9EagjnhnDpNsRdWCfjwa4mn/HyBXO9yhQP6A==",
"dev": true,
"license": "MIT",
"dependencies": {
"@babel/helper-annotate-as-pure": "^7.14.5",
"@babel/helper-wrap-function": "^7.14.5",
"@babel/types": "^7.14.5"
},
"engines": {
"node": ">=6.9.0"
}
},
```
the dependency-report
```json
{
"isVirtual": false,
"fileName": "@babel/helper-remap-async-to-generator:7.14.5",
"filePath": "/home/data/node_modules/@babel/helper-remap-async-to-generator/package.json",
"md5": "111eff9a9c13b6d30a74eb0e2c4ac521",
"sha1": "a84845559256282a7a74a176ded9f3f69c3a5a88",
"sha256": "c54113806963e886d6395c16edb4f85f9efa68bb2326b6b6939d1dde2f6ddeac",
"description": "Helper function to remap async functions to generators",
"license": "MIT",
"projectReferences": [
"peps-pa-webv2:0.0.0"
],
"evidenceCollected": {
"vendorEvidence": [
{
"type": "vendor",
"confidence": "HIGHEST",
```

The 'Dev' attribut would be usefull to filter the report.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.