Bump fetchcode to v0.3.0

Signed-off-by: Keshav Priyadarshi <[email protected]>

Author: keshav-space

requirements.txt

@@ -113,8 +113,7 @@ websocket-client==0.59.0
 yarl==1.7.2
 zipp==3.8.0
 dateparser==1.1.1
-# TODO: pin fetchcode, once nexB/fetchcode#93 is merged 
-# fetchcode==0.2.0
+fetchcode==0.3.0
 cwe2==2.0.0
 drf-spectacular-sidecar==2022.10.1
 drf-spectacular==0.24.2

setup.cfg

@@ -90,8 +90,7 @@ install_requires =
     # networking
     GitPython>=3.1.17
     requests>=2.25.1
-    # TODO: replace this with new fetchcode release
-    fetchcode @ git+https://github.com/nexB/fetchcode.git@refs/pull/93/head
+    fetchcode>=0.3.0
 
     #vulntotal
     python-dotenv

vulnerabilities/improvers/valid_versions.py

@@ -73,7 +73,7 @@ def get_package_versions(
         """
         versions = package_versions.versions(str(package_url))
         versions_before_until = set()
-        for version in versions:
+        for version in versions or []:
             if until and version.release_date and version.release_date > until:
                 continue
             versions_before_until.add(version.value)
@@ -277,7 +277,7 @@ def fetch_nginx_version_from_git_tags(self):
         Yield all nginx version from its git tags.
         """
         nginx_versions = package_versions.versions("pkg:github/nginx/nginx")
-        for version in nginx_versions:
+        for version in nginx_versions or []:
             cleaned = clean_nginx_git_tag(version.value)
             yield cleaned