Feature Request: Option to Ignore Dev Dependencies for NPM

[davekerber]

With NPM packages, I'd like the option to check all dependencies or exclude devDependencies when scanning a package.

[sobregosodd]

Hello @davekerber , thanks for reaching out. Your request makes total sense. IMO your proposal should be the default behaviour and optionally we can provide an environment variable to enable dev dep scanning.