Scan and report dependency groups of vulnerabilities for Yarn
Open
backlog
enhancement
- Dominant language
- Go
- Stars
- 11k
- Forks
- 792
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 48
Description
Need the same mechanism https://github.com/google/osv-scanner/pull/655 using [dependencies](https://classic.yarnpkg.com/lang/en/docs/package-json/#toc-dependencies) and [devDependencies](https://classic.yarnpkg.com/lang/en/docs/package-json/#toc-devdependencies) from package.json
Contributor guide
Assessment
This issue has not been assessed yet.