fix: malformed ingested package versions are fixed (#1246)

---------

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

HISTORY.md

@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 
 ## unreleased
 
+* Fix
+  * Malformed ingested package versions are fixed (via [#1246]) 
+
+[#1246]: https://github.com/CycloneDX/cyclonedx-webpack-plugin/pull/1246
+
 ## 3.9.0 - 2023-12-10
 
 * Changed

src/extractor.ts

@@ -62,9 +62,9 @@ export class Extractor {
           const _packageJson = structuredClonePolyfill(pkg.packageJson)
           normalizePackageJson(_packageJson as object /* add debug for warnings? */)
           // region fix normalizations
-          if (typeof pkg.packageJson === 'string') {
+          if (typeof pkg.packageJson.version === 'string') {
             // allow non-SemVer strings
-            _packageJson.version = pkg.packageJson.trim()
+            _packageJson.version = pkg.packageJson.version.trim()
           }
           // endregion fix normalizations
           pkg.packageJson = _packageJson