cli
cli copied to clipboard
Include `alias` information in the output of `phylum parse`
Overview
Currently, the output schema of phylum parse does not include information about the aliases. This information could be useful to the vuln-reach cli for correctly resolving aliased dependencies.
Proposed formats
There could be more than one alias for a given package, so either of these solutions could work:
- One package per alias.
{ "name": "vue-loader", "version": "17.0.1", "alias": "vue-loader-vue3" }, { "name": "vue-loader", "version": "17.0.1", "alias": "vue-loader-svelte" }, - An array of aliases:
{ "name": "vue-loader", "version": "17.0.1", "aliases": [ "vue-loader-vue3", "vue-loader-svelte" ] },
Acceptance Criteria
- [ ]
phylum parseoutputs an optional field with alias information alongside the rest of the package information.