Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(yarnlock): ignore yarn.lock files in node_modules #417

Merged

Conversation

G-Rath
Copy link
Collaborator

@G-Rath G-Rath commented Jan 29, 2025

This mirrors the behaviour of packagelockjson, so I think it should be applied here too as I don't know of any tool which respects lockfiles in node_modules.

This might fix #400

Copy link
Collaborator

@another-rex another-rex left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we need to do something similar with packagejsonlock?

@G-Rath
Copy link
Collaborator Author

G-Rath commented Jan 30, 2025

No that's already doing this - overall I think we should have a general helper that's shared by all the JavaScript extractors as there's also some logic for handling max size, but I'll look into that as a follow up

For now I've just done prs adding this specific logic to all js extractors

@copybara-service copybara-service bot merged commit 037a0a3 into google:main Jan 30, 2025
8 checks passed
@G-Rath G-Rath deleted the extractor/yarn-skip-node_modules branch January 30, 2025 18:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

npm results returning a lot of false positives or are other tools missing stuff?
2 participants