How to exclude dev-dependency in report

[weihan1394]

Following from the discussion from this issue created before (#1806)

Is there a way to exclude the dev-dependency from the dependency-check scan. I realize that with --nodeAuditSkipDevDependencies it just does not scan the dev-dependencies but in the HTML report it still reflect the dependency in dev-dependency. Hope anyone could share more insight if it could be remove from the report.

Thank you.

[jeremylong]

Try adding --disableNodeJS. There are a couple of JS analyzers and that one can cause the dev dependencies to be included and there isn't a way to exclude them. You might also need to disable the retire JS analyzer.