Skip to content

Need to scan dev packages in composer.lock #7095

@mlw157

Description

@mlw157

Is your feature request related to a problem? Please describe.
There is a few projects i'm working on where its important to be able to scan development packages in composer files (packages-dev array), but dependecy check currently only parses packages in the packages array.

Describe the solution you'd like
A possible flag or argument that could be passed that enables the packages-dev array to be parsed by dependecy check.

Describe alternatives you've considered
A possible work-around is after using checkout, modifying the composer.lock file to rename packages-dev to packages, which will make dependecy check scan it

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions