component-detection
component-detection copied to clipboard
Npm package-lock.json components not detected if peer = true and dev = true
For npm, package-lock file version 2,
some dependencies are not detected in /package-lock.json if "peer" : true and "dev" : true are mentioned.
for e.g.
"node_modules/axios": {
"version": "1.7.7",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.7.7.tgz",
"integrity": "sha512-S4kL7XrjgBmvdGut0sN3yJxqYzrDOnivkBiN0OFs6hLiUam3UPvswUo0kqGyhqUZGEOytHyumEdXsAkgCOUf3Q==",
"dev": true,
"peer": true,
"dependencies": {
"follow-redirects": "^1.15.6",
"form-data": "^4.0.0",
"proxy-from-env": "^1.1.0"
}
},
Related Internal Bug: 2264842