# Install snyk-nodejs-lockfile-parser with npm

Generate a dep tree given a lockfile. Version 2.8.1 via npm; verified 2026-07-01.

## Install

```sh
sudo av install npm:snyk-nodejs-lockfile-parser
```

Additional install commands:

### Portable and language managers

- npm (100%):

```sh
npm install -g snyk-nodejs-lockfile-parser
```

  Evidence: local npm package metadata

## Package facts

- **Package key:** npm:snyk-nodejs-lockfile-parser
- **Package manager:** npm
- **Package manager page:** <https://www.npmjs.com/package/snyk-nodejs-lockfile-parser>
- **Version:** 2.8.1
- **Source summary:** Generate a dep tree given a lockfile
- **Homepage:** <https://github.com/snyk/nodejs-lockfile-parser#readme>
- **Repository:** <https://github.com/snyk/nodejs-lockfile-parser>
- **Upstream docs:** <https://github.com/snyk/nodejs-lockfile-parser#readme>
- **License:** Apache-2.0
- **Source archive:** <https://registry.npmjs.org/snyk-nodejs-lockfile-parser/-/snyk-nodejs-lockfile-parser-2.8.1.tgz>
- **Issue tracker:** <https://github.com/snyk/nodejs-lockfile-parser/issues>
- **Published:** 2026-06-16T14:45:43.111Z
- **Last updated:** 2026-07-01T11:39:17.570Z
- **Generated:** 2026-07-08T07:18:31+00:00

## Executables

- parse-nodejs-lockfile (cli)
- parse-nodejs-lockfile (alias)

## Dependencies

- @snyk/dep-graph
- @snyk/error-catalog-nodejs-public
- @snyk/graphlib
- @yarnpkg/core
- @yarnpkg/lockfile
- dependency-path
- event-loop-spinner
- js-yaml
- lodash.clonedeep
- lodash.flatmap
- lodash.isempty
- lodash.topairs
- micromatch
- p-map
- semver
- snyk-config
- tslib
- uuid

## Build dependencies

- @types/jest
- @types/lodash
- @types/node
- @types/semver
- @types/uuid
- @typescript-eslint/eslint-plugin
- @typescript-eslint/parser
- eslint
- eslint-config-prettier
- jest
- prettier
- tap
- ts-jest
- ts-node
- typescript

## Install behavior

- Post-install hook: not defined
- Lifecycle scripts: prepare
- Bottle: not available

## Freshness

- Page generated: 2026-07-08
- Package-manager version: 2.8.1
- Package-manager updated: 2026-07-01
- Local data: ok
- Upstream repository: https://github.com/snyk/nodejs-lockfile-parser
- info: No cached GitHub release or tag data was available.

## Security Notes

No matching local secret-handling manifest was found for snyk-nodejs-lockfile-parser. Nucleus package metadata is still published here so future coverage has a stable package URL.


## Source Database Details

- **Source Database:** npm registry
- **Dist Tags:** Latest: 2.8.1
- **Version Count:** 168
- **Maintainers:** snyk-admin
- **Author:** snyk.io
- **Publisher:** CircleCI
- **Engines:** Node: ^20.19.0 || ^22.13.0 || >=24.0.0, npm: >=10
- **Integrity:** sha512-DlUuMVcKC+zZkSYKLsOTuoqDc6SneG1zN8hqc5p5gi8pvhr4AoCgHScICbLoW9ZnukLZi5gMOLVFF/ea61dv/A==
- **Shasum:** 6013c224e83e651fde690e850a1d83ce5894bda9
- **Unpacked Size:** 350,798
- **File Count:** 0
- **Created At:** 2018-08-03T13:33:43.159Z
- **Latest Published At:** 2026-06-16T14:45:43.111Z
- **Modified At:** 2026-06-16T14:45:43.252Z


## Related links

- [Text processing packages](https://www.automicvault.com/pkg/text-processing-tools/) - Matched curated package taxonomy and local package facts.
- [snyk-delta](https://www.automicvault.com/pkg/npm/snyk-delta/) - Package names and metadata indicate a similar tool family. Shared terms: dep, dep-graph, graph, lodash, map.
- [api-spec-converter](https://www.automicvault.com/pkg/npm/api-spec-converter/) - Both packages work with overlapping file formats or content types. Shared terms: clonedeep, error, js-yaml, lodash, lodash-clonedeep.
- [snyk-to-html](https://www.automicvault.com/pkg/npm/snyk-to-html/) - Package names and metadata indicate a similar tool family. Shared terms: isempty, lodash, lodash-isempty, snyk.

## Sources

- Nucleus package database
- package-page enrichment
- package version freshness
- package relationship graph
- cross-ecosystem install command graph