Hi ,

We migrated to pnpm from yarn package manager. At the last moment we stuck with SCA Agent scanning which supports only yarn.lock /package-lock and not pnpm-lock.yaml file.

We liked pnpm and dont want to revert back to yarn. So just need to maintain the yarn.lock file to make our SCA scanning functionality.

Do we have any way to do that. I know we can generate package-lock from installed node modules but here is my doubt
does npm install -package-lock-only will work on node modules folder which is generated by pnpm ?

Or you can suggest any better way to do that.