Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix: crash when analyzing node package with a local dependency #5235

Merged
merged 2 commits into from
Jan 10, 2023
Merged

fix: crash when analyzing node package with a local dependency #5235

merged 2 commits into from
Jan 10, 2023

Commits on Jan 6, 2023

  1. fix:crash when analyzing node package with a local dependency 

    Issue jeremylong#1947

When a package has a local dependency, the package-lock.json file
contains an entry without a version number, with "link": "true". This
lack of version attribute causes the NodePackageAnalyzer class to crash.

These entries should be skipped instead as they cannot be processed.
    @rturner-edjuster
    rturner-edjuster committed Jan 6, 2023
    Configuration menu
    Copy the full SHA
    54dd994 View commit details
    Browse the repository at this point in the history

Commits on Jan 9, 2023

  1. Update core/src/main/java/org/owasp/dependencycheck/analyzer/NodePack… 

    …ageAnalyzer.java
    @jeremylong
    jeremylong authored Jan 9, 2023
    Configuration menu
    Copy the full SHA
    0cbbe57 View commit details
    Browse the repository at this point in the history