Anna Owens
Anna Owens
pnpm version 8 includes an upgrade to lockfile version 6, but we currently only support up to pnpm lockfile v5. Since we are unable to accurately parse the lockfile v6,...
Today, the Pip detector automatically pulls from PyPI for latest version + dependency tree. https://github.com/microsoft/component-detection/blob/cf622c795006400d2644fc176e5e524032f043c1/docs/detectors/pip.md?plain=1#L25 We should use users' internal feeds, if configured, rather than making HTTP calls to PyPI...