ossf/scorecard
1
1
Fork 0
mirror of https://github.com/ossf/scorecard.git synced 2024-09-20 05:27:12 +03:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Frozen-Deps Check: Add npm-shrinkwrap.json lockfile (#55)

Browse Source 
According to npm, it has the same effect as a package-lock.json:
https://docs.npmjs.com/cli/v6/configuring-npm/shrinkwrap-json

Resolves #54
This commit is contained in:
Merlin Beutlberger 2020-11-10 16:04:48 +01:00 committed by GitHub
parent cdce9ddc56
commit dc1bbba544
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
checks/frozen_deps.go
View File

@ -77,7 +77,7 @@ func FrozenDeps(c checker.Checker) checker.CheckResult {
case "vendor/", "third_party/", "third-party/":
c.Logf("vendor dir found: %s", name)
return passResult
case "package-lock.json":
case "package-lock.json", "npm-shrinkwrap.json":
c.Logf("nodejs packages found: %s", name)
return passResult
case "requirements.txt", "pipfile.lock":