parsePnpmLock: handle files with no packages field (#824)

* Add debug message Signed-off-by: Rogerio Bastos <2397391+rogeriobastos@users.noreply.github.com> * parsePnpmLock: handle files with no packages field Signed-off-by: Rogerio Bastos <2397391+rogeriobastos@users.noreply.github.com> --------- Signed-off-by: Rogerio Bastos <2397391+rogeriobastos@users.noreply.github.com>
CycloneDX · Jan 22, 2024 · f38780a · f38780a
1 parent d995387
commit f38780a
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/utils.js b/utils.js
@@ -1260,6 +1260,9 @@ export const parsePnpmLock = async function (pnpmLock, parentComponent = null) {
       ).toString();
   }
   if (existsSync(pnpmLock)) {
+    if (DEBUG_MODE) {
+      console.log(`Parsing file ${pnpmLock}`);
+    }
     const lockData = readFileSync(pnpmLock, "utf8");
     const yamlObj = _load(lockData);
     if (!yamlObj) {
@@ -1295,7 +1298,7 @@ export const parsePnpmLock = async function (pnpmLock, parentComponent = null) {
     } catch (e) {
       // ignore parse errors
     }
-    const packages = yamlObj.packages;
+    const packages = yamlObj.packages || {};
     const pkgKeys = Object.keys(packages);
     for (const k in pkgKeys) {
       // Eg: @babel/code-frame/7.10.1