2023-07-04 04:05:20 +00:00
id : pnpm-lock
info :
name : PNPM Lock Yaml File Disclosure
author : noraj
severity : info
description : |
The pnpm-lock.yaml file is similar to the package-lock.json file used by npm or the yarn.lock file used by Yarn. It serves as a lock file that ensures consistent and reproducible installations of dependencies across different environments.
reference :
- https://pnpm.io/cli/install#tldr
metadata :
verified : true
2023-10-14 11:27:55 +00:00
max-request : 1
2023-07-04 04:05:20 +00:00
shodan-query : html:"pnpm-lock.yaml"
tags : exposure,files,node,npm,pnpm
http :
- method : GET
path :
- "{{BaseURL}}/pnpm-lock.yaml"
matchers-condition : and
matchers :
- type : word
part : body
words :
- "lockfileVersion:"
- "specifiers:"
- "packages:"
condition : and
- type : status
status :
- 200
2023-10-20 11:41:13 +00:00
# digest: 4a0a0047304502200b3ea5ca7f1f1fb4f15200ae70cae24d012049e41b2572ddf8116e1b952dab72022100ac9deac6c837c892d84fac4cd73c5cbac14e6821b0d3a51ab9140d894ada0cd1:922c64590222798bb761d5b6d8e72950
