Company
Date Published
Author
Liliana Kastilio
Word count
641
Language
English
Hacker News points
None

Summary

We have improved our lockfile support for JavaScript projects, allowing for faster and more accurate test results. Our new functionality uses a node-lockfile-parser lib to traverse the lockfile itself and the package.json file instead of the entire node_modules folder, resulting in better performance and accuracy. For projects with yarn.lock or package-lock.json files, we will automatically detect these and process them as lockfile-based, while for projects without lockfiles, our previous support is still available. This change affects how Snyk tests work, providing more accurate results but also requiring manual intervention to update lockfiles before merging Pull Requests.