Skip to content

[K9VULN-14776] Manifest-only cleanup#153

Merged
rjcoulter22 merged 3 commits into
mainfrom
ryan.coulter/package-json-manifest-cleanup
May 19, 2026
Merged

[K9VULN-14776] Manifest-only cleanup#153
rjcoulter22 merged 3 commits into
mainfrom
ryan.coulter/package-json-manifest-cleanup

Conversation

@rjcoulter22

@rjcoulter22 rjcoulter22 commented May 19, 2026

Copy link
Copy Markdown
Contributor

What problem are you trying to solve?

  • package.json manifest parsing did not classify npm wildcard ranges like * and x as version ranges.
  • package.json manifest parsing could emit unsupported specs with neither a concrete version nor a version range.
  • Manifest-only README docs were stale

What is your solution?

Classify package.json wildcard ranges as VersionRange, skip package.json specs that still produce neither Version nor VersionRange, and update README docs for package.json and pyproject.toml manifest-only extraction.

@datadog-datadog-prod-us1

datadog-datadog-prod-us1 Bot commented May 19, 2026

Copy link
Copy Markdown

🎯 Code Coverage (details)
Patch Coverage: 100.00%
Overall Coverage: 85.10% (+0.01%)

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 0ac750b | Docs | Datadog PR Page | Give us feedback!

@rjcoulter22 rjcoulter22 changed the title [K9VULN-14776] Clean up manifest-only package docs [K9VULN-14776] Manifest-only cleanup May 19, 2026
@rjcoulter22
rjcoulter22 marked this pull request as ready for review May 19, 2026 13:29
@rjcoulter22
rjcoulter22 requested a review from a team as a code owner May 19, 2026 13:29

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 0872fa947f

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread pkg/lockfile/javascript/parse-package-json.go
@rjcoulter22
rjcoulter22 force-pushed the ryan.coulter/package-json-manifest-cleanup branch from 0872fa9 to c05b4fb Compare May 19, 2026 13:36
@rjcoulter22
rjcoulter22 force-pushed the ryan.coulter/package-json-manifest-cleanup branch from c05b4fb to 0ac750b Compare May 19, 2026 13:52
@rjcoulter22
rjcoulter22 merged commit f974cc1 into main May 19, 2026
11 checks passed
@rjcoulter22
rjcoulter22 deleted the ryan.coulter/package-json-manifest-cleanup branch May 19, 2026 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants