Repository files navigation

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

This is a small utility package that parses lock file and returns either adependency tree or adependency graph. Dependency graphs are the more modern data type and we plan to migrate fully over.

Dep graph generation supported for:

• package-lock.json (at Versions 2 and 3)
• yarn.lock
• pnpm-lock.yaml (lockfileVersion 5.x, 6.x and 9.x)

Legacy dep tree supported for:

• package-lock.json
• yarn 1yarn.lock
• yarn 2yarn.lock