jfrog / jfrog/jfrog-cli-security
jf curation-audit to run on pnpm projects
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
Is your feature request related to a problem? Please describe.
Jf audit command supports pnpm but the jf curation-audit command does not appear to. This makes it impractical to use curation policies on pnpm projects as the waiver process becomes incredibly unwieldy.
Describe the solution you'd like to see
I would like to be able to run curation-audit on pnpm projects
Describe alternatives you've considered
None
Additional context
N/A
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Compare how the jf audit command handles pnpm projects with the curation-audit command entry point. Run curation-audit against a pnpm project and verify that curation policies and waivers work without the current workaround.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cli
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100