Aggressively mark packages as optional in evidence mode. See discussi…

…on in #466 Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
CycloneDX · Oct 18, 2023 · fb31a82 · fb31a82
1 parent 90ad0bc
commit fb31a82
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/utils.js b/utils.js
@@ -7108,6 +7108,10 @@ export const parsePackageJsonName = (name) => {
 export const addEvidenceForImports = (pkgList, allImports) => {
   const impPkgs = Object.keys(allImports);
   for (const pkg of pkgList) {
+    if (impPkgs && impPkgs.length) {
+      // Assume that all packages are optional until we see an evidence
+      pkg.scope = "optional";
+    }
     const { group, name } = pkg;
     let aliases =
       group && group.length