Need help understanding hashes in `npm audit` output

Question

in my npm audit output I saw the following entry with a hash:

├───────────────┼─────────────────────────────────────────┤
│ Path          │ 050fb87979f5c6895917ef26a696d57ebf3cf1… │
│               │ > mocha > growl                         │
├───────────────┼─────────────────────────────────────────┤

May I know what the hash stands for and where can I find the dependency tree node it represents? I searched online and searched through my package-lock.json file but couldn't find it.

Thanks!

Answer 1

Somehow I was able to figure it out not long after posting it, by using npm ls growl. It shows that the hash represents an internal package. (The confusing part is that some internal packages were displayed by package name in npm audit output while some were displayed as hashes. | Update: it turns out that we are importing some package by their git commit directly, in those case those dependencies are displayed as hashes.)