component-detection icon indicating copy to clipboard operation
component-detection copied to clipboard

Npm package-lock.json components not detected if peer = true and dev = true

Open RushabhBhansali opened this issue 8 months ago • 0 comments

For npm, package-lock file version 2, some dependencies are not detected in /package-lock.json if "peer" : true and "dev" : true are mentioned.

for e.g.

"node_modules/axios": {
      "version": "1.7.7",
      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.7.tgz",
      "integrity": "sha512-S4kL7XrjgBmvdGut0sN3yJxqYzrDOnivkBiN0OFs6hLiUam3UPvswUo0kqGyhqUZGEOytHyumEdXsAkgCOUf3Q==",
      "dev": true,
      "peer": true,
      "dependencies": {
        "follow-redirects": "^1.15.6",
        "form-data": "^4.0.0",
        "proxy-from-env": "^1.1.0"
      }
    },

Related Internal Bug: 2264842

RushabhBhansali avatar Mar 29 '25 08:03 RushabhBhansali