Closed
Description
PNPM has updated their lock file format such that it can no longer be processed correctly by osv-scanner.
The issue appears two fold, one in the version specifier, previously lockfileVersion: 5.4
now lockfileVersion: '6.0'
as well as the way it defines package name and version pairs, previously /acorn/8.7.0
now /acorn@8.7.0
.