mirror of
https://github.com/safedep/vet.git
synced 2025-12-10 13:43:01 -06:00
1dba6fdd8e
feat: Add npm package-lock.json graph parser fix: Npm graph parser path to root traversal fix: File naming convention for npm graph parser feat: Add reporter for graph visualization in dot format feat: Add support for showing dependency upgrade path in summary report fix: Bug in summary reporter related to random ordering of entries with same score chore: Add support for experimental flag in scanner config refactor: Test cases or npm package name extractor into utils feat: Add support for dependency graph data in CSV report generator fix: LFP npm handle package links test: Improve test for npm name extraction feat: Add support for reconstructing dependency graph using insights data fix: purl reader to use package manifest builder test: Add E2E for gradle dependency graph reconstruction fix: Handle root node marking heuristics for enriched dependency graph feat: Allow query command to generate dependency graph fix: Scanner dependency graph reconstruction using dependency distance fix: Test case for maven dependency graph reconstruction chore: Improve summary report text for dependency path to root refactor: Code re-use in npm graph to find by semver range
19 lines
377 B
Go
19 lines
377 B
Go
package utils
|
|
|
|
import (
|
|
"path"
|
|
"strings"
|
|
)
|
|
|
|
// Re-use from: https://github.com/google/osv-scanner/blob/main/pkg/lockfile/parse-npm-lock.go#L128
|
|
func NpmNodeModulesPackagePathToName(name string) string {
|
|
maybeScope := path.Base(path.Dir(name))
|
|
pkgName := path.Base(name)
|
|
|
|
if strings.HasPrefix(maybeScope, "@") {
|
|
pkgName = maybeScope + "/" + pkgName
|
|
}
|
|
|
|
return pkgName
|
|
}
|