Zod schema fails if there are "workspace:*" dependencies

[wtlgo]

With pnpm monorepo, if there's a "package": "workspace:*" dependency in the package.json, pnpm licenses list does not generate the version field for such dependency for some reason (even though it is specified in dependencies package.json). Because of this the tool simply does not work in such an environment.

[wtlgo]

I was able to work around it by patch

diff --git a/dist/chunk-L3HHIU3I.mjs b/dist/chunk-L3HHIU3I.mjs
index c048b0eabda2092497bc3522a3a24f1786d14d1e..21e5ca45993a5a23af8f71135658fe33567fdff3 100644
--- a/dist/chunk-L3HHIU3I.mjs
+++ b/dist/chunk-L3HHIU3I.mjs
@@ -21,7 +21,7 @@ var pnpmDependencyFlattenedSchema = z.object({
   description: z.string().optional()
 });
 var pnpmDependencySchema = z.union([pnpmDependencyGroupedSchema, pnpmDependencyFlattenedSchema]);
-var pnpmInputSchema = z.record(z.string(), z.array(pnpmDependencySchema));
+var pnpmInputSchema = z.record(z.string(), z.array(z.unknown()).transform(arr => arr?.filter(item => pnpmDependencySchema.safeParse(item).success)));
 var flattenDependencies = (deps) => deps.flatMap(({ name, license, author, homepage, description, ...rest }) => {
   if ("version" in rest) {
     return [{ name, license, author, homepage, description, ...rest }];

But there probably should be a better way...

[JaninaWibkerQC]

Sorry for only responding now, I didn't have notifications turned on for the repo 😅

pnpm licenses list has quite a few bugs/inconsistencies oftentimes, I cannot reproduce the issue because for me the monorepo dependencies are excluded completely from the output.

I am not sure if I am missing some flag or similar but pnpm only lists non-workspace dependencies for me

I tested v7, v8 and v9 of pnpm but they all behaved the same