[BUG] Empty String dependencies get omitted from pruned yarn.lock files resulting in yarn syntax errors

[zeonglow]

Summary

Background

According to this documentation on package.json, dependencies can be specified as "", although rare, it is used and is part of the spec.

When I produce a pruned version of a yarn.lock file, using 'turbo prune', the double quotes are omitted resulting in an invalid yarn.lock file which breaks the build.

** Steps to replicate **

At time of writing, (I've emailed him ;-) ) murmurhash3. has a dependencies on 'shipit-js' which has this in it's dependencies

  "dependencies": {
    "async": "",
    "commander": ">=0.6.1",
    "js-beautify-node": "",
    "semver": "^5.5.1",
    "temp": "",
    "underscore": ""
  },

In the root lock file this becomes:

shipitjs@^0.3.2:
  version "0.3.2"
  resolved "https://registry.yarnpkg.com/shipitjs/-/shipitjs-0.3.2.tgz#23443603cc4aabfe373ffaaef94a78b17bb9729c"
  integrity sha512-uLtgZP2PBzxwoCDfEhARWpuQewMwRLGhkrD8O/rqXHdyYjaV8LY0F4aMi5Lr3l4XWm5YiHINsCMhzD0scu7GzQ==
  dependencies:
    async ""
    commander ">=0.6.1"
    js-beautify-node
    semver "^5.5.1"
    temp ""
    underscore ""

The pruned yarn.lock produced by turbo prune is as follows:

shipitjs@^0.3.2:
  version "0.3.2"
  resolved "https://registry.yarnpkg.com/shipitjs/-/shipitjs-0.3.2.tgz#23443603cc4aabfe373ffaaef94a78b17bb9729c"
  integrity sha512-uLtgZP2PBzxwoCDfEhARWpuQewMwRLGhkrD8O/rqXHdyYjaV8LY0F4aMi5Lr3l4XWm5YiHINsCMhzD0scu7GzQ==
  dependencies:
    async
    commander ">=0.6.1"
    js-beautify-node
    semver "^5.5.1"
    temp
    underscore

The yarn.lock parser requires two tokens per line, so breaks when it encounters this, not with a particularly friend error message either!

I would appreciate if this could be fixed, I wouldn't want anyone else to go through this! It took me a while to figure out that it was Turbo as the source of the problem!

Additional information

turbo --version
2.5.5

Bug is also in 2.5.4

Steps to reproduce - simpler

create a monorepo where one subpackage has a dependency on 'murmurhash3' , make a pruned lockfile with

turbo prune subproject --docker and use the out/yarn.lock and yarn install with it. You will get an obtuse error message about a syntax error, which changes depending on which version of yarn you are using.