github.com/google/osv-scalibr@v0.4.1/extractor/filesystem/language/javascript/pnpmlock/testdata/files.yaml (about)

     1  lockfileVersion: 5.4
     2  
     3  specifiers:
     4    my-file-package: file:./projects/package-a.tgz
     5  
     6  dependencies:
     7    my-file-package: file:./projects/package-a.tgz
     8  
     9  packages:
    10    file:projects/package-a.tgz:
    11      resolution: { integrity: sha512-IGZcvUzTIN7kALye9n4gFuh8nWXFrWp4P/UT2btEHCRDJvVODIGJgVsFNOGnDYc543OmTs8keZBa5tkMMoHIgg==, tarball: file:projects/package-a.tgz }
    12      name: 'my-file-package'
    13      version: 0.0.0
    14      dev: false
    15  
    16    file:../a-local-package:
    17      resolution: {directory: ../local-package, type: directory}
    18      name: a-local-package
    19      version: 1.0.0
    20      dev: false
    21  
    22    file:../a-local-package/nested:
    23      resolution: {directory: ../a-local-package/nested, type: directory}
    24      name: a-nested-local-package
    25      version: 1.0.0
    26      dev: false
    27  
    28    file:..:
    29      resolution: {directory: .., type: directory}
    30      name: one-up
    31      version: 1.0.0
    32      dev: false
    33  
    34    file:.._react-dom@18.2.0:
    35      resolution: {directory: .., type: directory}
    36      name: one-up-with-peer
    37      version: 1.0.0
    38      dev: false
    39      peerDependencies:
    40        react-dom: ^18.0.0
    41  
    42    # file based dependencies must always have a name so this is impossible,
    43    # but we want to ensure we don't panic just in case
    44    file:../nameless-package:
    45      resolution: {directory: ../nameless-package, type: directory}
    46      version: 1.0.0
    47      dev: false