npms-io / npms-analyzer / 1389 / 2

97%

master: 97%

push

travis-ci

Fix packages being wrongly flagged as insecure (#211)

Since we download the original source code, the package-lock file might be part of the download code.
Nodesecurity CLI respects the versions of package-lock which are mostly outdated and those aren't the versions that consumers will get when installing the package.

255 of 282 branches covered (90.43%)

702 of 726 relevant lines covered (96.69%)

30.21 hits per line