feat(core): add specifier type for * & latest

[wtchnm]

Description

Hello, thank you for this great tool! I have a question about the usage of the * protocol. While it's nice for peerDependencies, I find it less ideal in devDependencies where I prefer to have an exact version.

Suggested Solution

I propose the following configuration to support banning a specific version of a package, serving as a potential security measure:

"versionGroups": [
  {
    "label": "Ban * protocol in devDependencies",
    "dependencyTypes": ["dev"],
    "pinVersion": "*",
    "isBanned": true
  }
]

This would allow us to explicitly disallow the use of the * protocol in devDependencies.

Help Needed

I am willing to create a PR if the suggested solution aligns with the project's goals.

[JamieMason]

Thanks a lot @wtchnm, this sounds like it could be addressed by something myself and @moltar were discussing here – please take a look and see if you agree with that approach 👍

[wtchnm]

Sorry @JamieMason, I searched the repo for similar issues but totally missed that one. I agree with the solution you proposed!

[JamieMason]

No problem at all 👍

[JamieMason]

Released in 12.2.0.

👋 If anyone reading this finds syncpack useful, please tell people about it.

[wtchnm]

Thanks @JamieMason, it worked great with specifierTypes:

"versionGroups": [
  {
    "label": "Ban * protocol in devDependencies",
    "dependencyTypes": ["dev"],
    "specifierTypes": ["latest"],
    "isBanned": true
  }
]

I made a PR to fix the examples in the documentation: #185.