Skip to content

Commit ebe6f0d

Browse files
authored
fix: Add null checking when parsing the license json in AbstractNpmAnalyzer. (#7784)
1 parent 2bf4e0d commit ebe6f0d

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

core/src/main/java/org/owasp/dependencycheck/analyzer/AbstractNpmAnalyzer.java

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -393,8 +393,11 @@ public void gatherEvidence(final JsonObject json, Dependency dependency) {
393393
}
394394
}
395395
dependency.setLicense(sb.toString());
396-
} else {
397-
dependency.setLicense(json.getJsonObject("license").getString("type"));
396+
} else if (value instanceof JsonObject) {
397+
final JsonObject object = (JsonObject) value;
398+
if (object.containsKey("type") && !object.isNull("type")) {
399+
dependency.setLicense(object.getString("type"));
400+
}
398401
}
399402
}
400403
}

0 commit comments

Comments
 (0)