fix: npe

lmo-wt · lmo-wt · commit 219c4f3c720b · 2023-01-26T18:57:31.000+01:00
diff --git a/core/src/main/java/org/owasp/dependencycheck/data/nodeaudit/NpmPayloadBuilder.java b/core/src/main/java/org/owasp/dependencycheck/data/nodeaudit/NpmPayloadBuilder.java
@@ -115,7 +115,7 @@ public static JsonObject build(JsonObject lockJson, JsonObject packageJson,
                 }
 
                 final JsonObject dep = ((JsonObject) value);
-                final String version = dep.getString("version");
+                final String version = dep.getString("version", "");
                 final boolean isDev = dep.getBoolean("dev", false);
                 if (skipDevDependencies && isDev) {
                     return;

Original file line number	Diff line number	Diff line change
`@@ -115,7 +115,7 @@ public static JsonObject build(JsonObject lockJson, JsonObject packageJson,`
`115`	`115`	`}`
`116`	`116`
`117`	`117`	`final JsonObject dep = ((JsonObject) value);`
`118`		`- final String version = dep.getString("version");`
	`118`	`+ final String version = dep.getString("version", "");`
`119`	`119`	`final boolean isDev = dep.getBoolean("dev", false);`
`120`	`120`	`if (skipDevDependencies && isDev) {`
`121`	`121`	`return;`