NPE in FileParser for composer

[leoamigood]

Is there an existing issue for this?

• I have searched the existing issues

Package ecosystem

composer

What you expected to see, versus what you actually saw

Looks like there is NPE in FileParser for composer code:

dependabot-core/composer/lib/dependabot/composer/file_parser.rb

Line 168 in 6535db1

parsed_lockfile.fetch(key, []).find { |d| d["name"] == name }

undefined method `find' for nil:NilClass\n\n        
parsed_lockfile.fetch(key, []).find { |d| d[\"name\"] == name }\n

I get this error in this repo: https://github.com/JoshuaEstes/ServerTools

[jeffwidman]

We should try to repro this using the dry-run script against that repo... if it doesn't reproduce, then close for the reasons outlined here:

• NPE in npm_and_yarn/helpers.rb #5824 (comment)

[deivid-rodriguez]

It seems to be indeed crashing, so let's keep open!

[abdulapopoola]

This will be picked up by @GarryHurleyJr

[GarryHurleyJr]

added some defensive coding around nil for key file and lockfile. still have debugging code to remove.

[GarryHurleyJr]

Code merged