Will DepShield check sub-projects in repository?


See this repository:

I use yarn workspace to organize 3 sub-projects.
So I have 4 package.json files, 1 for workspace, 3 for sub-projects.

Does DepShield check all of them?


For NPM DepShield currently will only build out of the root. In the case of this repo it would only process the package.json in the root and won’t find the three others.


Yarn workspace is a popular way to organize a project, do you have a plan to support it?


Hi @yuanqiulee,

We currently do not have plans to support non npm (yarn/learna/etc) implementations of node dependency management. Like everything in the community, we use votes and conversation on thread to help determine priorities so thank you for starting this discussion.