Ignoring alerts

lstn includes support for ignoring dependencies by name and type. This is configurable through the following ways:
Using CLI flags:
  --ignore-deptypes
  --ignore-packages
Only works for lstn scan at the moment.
Using config file (lstn.yml)
...
filtering:
  ignore:
    packages:
      - "donotprocessme"
      - "react"
    deptypes:
     - "peer"
Using env vars
LSTN_IGNORE_DEPTYPES=peer,optional
LSTN_IGNORE_PACKAGES=react,@vue/devtools

Last modified 4mo ago