hardened JSON imports

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>
CycloneDX · Dec 10, 2023 · 926bd58 · 926bd58
1 parent 6007220
commit 926bd58
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/builders.ts b/src/builders.ts
@@ -354,7 +354,7 @@ export class BomBuilder {
     const packageJsonPath = path.join(data.path, 'package.json')
     try {
       return Object.assign(
-        loadJsonFile(packageJsonPath),
+        loadJsonFile(packageJsonPath) ?? {},
         data
       )
     } catch {
@@ -591,7 +591,7 @@ export class BomBuilder {
     /* eslint-enable no-labels */
 
     for (const packageJsonPath of packageJsonPaths) {
-      const packageData = loadJsonFile(packageJsonPath)
+      const packageData: object = loadJsonFile(packageJsonPath) ?? {}
       normalizePackageData(packageData /* add debug for warnings? */)
       const tool = this.toolBuilder.makeTool(packageData)
       if (tool !== undefined) {