Lockfile resolve
Which lockfiles took the bad version
Paste the pinned lines from a lockfile and each one is checked against the graph: does this exact version exist, and does anything a service ships reach the compromised version through it.
Entries checked5
Resolved to compromised0
Known to the graph0
Unparsed lines0
resolving…
One per line. name version, name@version, name==version and "name": "version" all parse. Ranges are skipped — only a resolved version answers this question.
- key
npm:axios@1.7.2- package
- axios
An entry counts as resolved to the compromise when a service reaches the bad version through it — so an entry can exist in the graph and still be harmless.