Ignoring group "dev" deps not working for pnpm
Open
backlog
bug
enhancement
- Dominant language
- Go
- Stars
- 11k
- Forks
- 792
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 48
Description
I have the following config
```toml
[[PackageOverrides]]
group = "dev"
license.ignore = true
```
When I run `osv-scanner --experimental-licenses-summary pnpm-lock.yaml` , the summary contains the same list as when I run it without that config.
And when running with `--experimental-licenses MIT,ISC,Apache-2.0,..` I see failures in dev dependencies.
Contributor guide
Assessment
This issue has not been assessed yet.