Skip to content

[bug] Generating SBOM - Unable to parse without legacy-peer-dependencies #399

@eduardoRoth

Description

@eduardoRoth

Error

⠸ Generating SBOMUnable to parse /Users/eduardoroth/Developer/eol-scans/package-lock.json without legacy peer dependencies. Retrying ...
Unable to parse /Users/eduardoroth/Developer/eol-scans/package-lock.json in legacy and non-legacy mode. The resulting SBOM would be incomplete.

Steps to reproduce

  1. Create a package.json and add as devDependencies (or regular dependencies) the following packages:
"devDependencies": {
    "lerna": "2.0.0",
    "lodash": "4.17.21"
  },
  1. Run npm i to have the package-lock.json generated
  2. Run @npx @herodevs/cli@beta

Expected behavior

Two ways of solving this, if Unable to parse error is hit then:

  1. Re-run with --legacy-peer-deps flag automatically
  2. Terminate the process and show a message to run the cli with a legacy-deps flag (-l or something like that)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions