Turn PURL parse error into a warning (#62)

nowsecure · May 22, 2024 · ce7e7dc · ce7e7dc
1 parent 585eced
commit ce7e7dc
Showing 1 changed file with 8 additions and 2 deletions.
diff --git a/src/nowsecure-snapshot.ts b/src/nowsecure-snapshot.ts
@@ -66,8 +66,14 @@ export function convertToSnapshot(
 
     const purl = encodePurl(ecosystem, component.name, component.version);
 
-    manifest.addDirectDependency(new Package(purl));
-    manifests[source] = manifest;
+    try {
+      const pkg = new Package(purl);
+      manifest.addDirectDependency(pkg);
+      manifests[source] = manifest;
+    } catch (e) {
+      // Add some additional context about the PURL that failed to be parsed.
+      console.warn(`${(e as Error).message} (PURL is '${purl}')`);
+    }
   }
 
   const snapshot = new Snapshot(