refactor: add comment for cmd parse

extractor/extractor.go

@@ -8,6 +8,7 @@ import (
 
 	packagev1 "buf.build/gen/go/safedep/api/protocolbuffers/go/safedep/messages/package/v1"
 	"github.com/google/osv-scanner/pkg/lockfile"
+	"github.com/safedep/dry/log"
 )
 
 type ExtractorConfig struct {
@@ -52,7 +53,7 @@ func (e *extractor) ExtractManifest() ([]*packagev1.PackageVersion, error) {
 		// Extract packages from this lockfile
 		packages, err := e.extractFromLockfile(filePath)
 		if err != nil {
-			fmt.Printf("Warning: failed to extract from %s: %v\n", filePath, err)
+			log.Warnf("failed to extract from %s: %v\n", filePath, err)
 			continue
 		}
 

packagemanager/npm.go

@@ -50,7 +50,7 @@ func (npm *npmPackageManager) ParseCommand(args []string) (*ParsedCommand, error
 
 	command := Command{Exe: npm.Config.CommandName, Args: args}
 
-	// No command specified
+	// Since manifest-based installs like 'npm i' are now valid commands
 	if len(args) < 1 {
 		return &ParsedCommand{
 			Command: command,

packagemanager/pypi.go

@@ -43,6 +43,7 @@ func (pip *pipPackageManager) ParseCommand(args []string) (*ParsedCommand, error
 	}
 	command := Command{Exe: pip.Config.CommandName, Args: args}
 
+	// Since manifest-based installs like 'npm i' are now valid commands
 	if len(args) < 1 {
 		return &ParsedCommand{
 			Command: command,
@@ -80,7 +81,7 @@ func (pip *pipPackageManager) ParseCommand(args []string) (*ParsedCommand, error
 
 				// Handle other flags that indicate manifest installation
 				if currentArg == "-e" || currentArg == "--editable" ||
-				   currentArg == "-c" || currentArg == "--constraint" {
+					currentArg == "-c" || currentArg == "--constraint" {
 					if i+1 < len(args) {
 						i++ // skip the next argument
 					}