@sentiness/check-lockfile-lint
v0.1.2
Published
Sentiness check that validates npm/Yarn lockfile security policies via lockfile-lint.
Downloads
8
Readme
@sentiness/check-lockfile-lint
Runs lockfile-lint against npm and Yarn lockfiles and normalizes policy violations as Sentiness
security findings. pnpm-lock.yaml is skipped because lockfile-lint does not support pnpm lockfiles.
Default policy:
lockfile-lint --validate-https --validate-integrity --allowed-hosts npm yarn