Feature Request: Option to Ignore Dev Dependencies for NPM

[davekerber]

With NPM packages, I'd like the option to check all dependencies or exclude devDependencies when scanning a package.

[sobregosodd]

Hello @davekerber , thanks for reaching out.
Your request makes total sense.
IMO your proposal should be the default behaviour and optionally we can provide an environment variable to enable dev dep scanning.