When viewing a package-lock.json file in the browser with JS-Miner active, a false positive HIGH Vulnerability alert for Dependency Confusion is consistently triggered.
The root cause might stems from an extraneous "{" character being included in the npm package search query. Thus this character is erroneously interpreted as part of the package name, leading to the false positives.
When viewing a package-lock.json file in the browser with JS-Miner active, a false positive HIGH Vulnerability alert for Dependency Confusion is consistently triggered.
The root cause might stems from an extraneous
"{"character being included in the npm package search query. Thus this character is erroneously interpreted as part of the package name, leading to the false positives.