synp icon indicating copy to clipboard operation
synp copied to clipboard

Package-lock.json missing some deps compared to npm's version

Open sebastienroux opened this issue 4 years ago • 1 comments

Issue description:

After converting yarn.lock, generated package-lock.json is missing some dep declaration and some "dev" flags (using 1.9.4) Capture d’écran 2020-10-07 à 17 26 01

Here all json/lock files : https://gofile.io/uploadFiles Or directly attached (beware of .txt extension) package-lock-npm.json.txt package-lock-synp.json.txt package.json.txt yarn.lock.txt

I made a gitlab project for testing synp AND https://github.com/jeremylong/DependencyCheck. https://gitlab.com/boloss/test-dependency-check You can fork it if you want

sebastienroux avatar Oct 07 '20 15:10 sebastienroux

@sebastienroux

As I can see, we now have false-positive dev flags. It will take some time to clarify how the npm implements this logic.

antongolub avatar Oct 08 '20 11:10 antongolub