fix(npm): lockfile v3 is_direct_dependency

murphysecurity · May 15, 2023 · 0ac2a96 · 0ac2a96
1 parent 833cff6
commit 0ac2a96
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/module/npm/lockfile_v3.go b/module/npm/lockfile_v3.go
@@ -44,6 +44,9 @@ func parseLockfileV3(data []byte) (r *v3ParsedLockfile, e error) {
 		Version: lockfile.Version,
 		Deps:    make([]model.DependencyItem, 0),
 	}
+	for i := range parsedLockfile.Deps {
+		parsedLockfile.Deps[i].IsDirectDependency = true
+	}
 	root := lockfile._v3Conv("", "", make(map[string]struct{}))
 	if root != nil {
 		parsedLockfile.Deps = root.Dependencies