/**
 * Monorepo-aware dependency scanner tests.
 *
 * Tests the multi-package discovery and per-package audit logic introduced
 * in `src/scanners/dependencies.ts`. Real `npm audit` subprocess calls are
 * avoided by mocking `cross-spawn` so these tests run offline with no
 * network access and no node_modules installs in fixtures.
 *
 * Covers:
 *  1. Nested package with a lockfile (NOT in root workspaces) IS audited —
 *     this is the regression guard for the dogfooding miss.
 *  2. Findings from a nested package have `file` prefixed with its
 *     repo-relative path (e.g. "packages/webish/package.json").
 *  3. A nested package whose audit errors → a loud info finding tagged with
 *     its path; the overall scanner still returns success:true.
 *  4. A clean nested package contributes no vuln findings.
 *  5. Root-only repo (no nested packages) still works unchanged.
 *  6. No package.json at root → early return success:true with skip message.
 */
export {};
//# sourceMappingURL=dependencies-monorepo.test.d.ts.map