snyk 1.999.0 → 1.1000.0

package/dist/cli/545.index.js

@@ -156839,11 +156839,13 @@ Object.defineProperty(exports, "poetryFilesToScannedProjects", ({ enumerable: tr
 Object.defineProperty(exports, "__esModule", ({ value: true }));
 exports.pipFilesToScannedProjects = void 0;
 const dep_graph_1 = __webpack_require__(26326);
+const Debug = __webpack_require__(15158);
 const event_loop_spinner_1 = __webpack_require__(77158);
 const path = __webpack_require__(85622);
 const semver = __webpack_require__(41009);
 const metadata_parser_1 = __webpack_require__(97176);
 const requirements_parser_1 = __webpack_require__(13157);
+const debug = Debug("snyk");
 class PythonDepGraphBuilder {
     constructor(name, requirements, metadata) {
         this.requirements = requirements;
@@ -156906,7 +156908,13 @@ async function pipFilesToScannedProjects(filePathToContent) {
             requirements[filepath] = (0, requirements_parser_1.getRequirements)(filePathToContent[filepath]);
         }
         else if (fileBaseName === "METADATA") {
-            metadataItems.push((0, metadata_parser_1.getPackageInfo)(filePathToContent[filepath]));
+            try {
+                const packageInfo = (0, metadata_parser_1.getPackageInfo)(filePathToContent[filepath]);
+                metadataItems.push(packageInfo);
+            }
+            catch (err) {
+                debug(err.message);
+            }
         }
     }
     if (metadataItems.length === 0) {
@@ -160644,7 +160652,8 @@ exports.specifierValidRange = specifierValidRange;
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.getPackageInfo = void 0;
+exports.PythonInvalidVersionError = exports.getPackageInfo = void 0;
+const semver = __webpack_require__(41009);
 const common_1 = __webpack_require__(60409);
 const PACKAGE_NAME = "Name: ";
 const PACKAGE_VERSION = "Version: ";
@@ -160673,7 +160682,15 @@ function getPackageInfo(fileContent) {
             }
         }
     }
-    return { name: name.toLowerCase(), version, dependencies };
+    const validVersion = semver.coerce(version);
+    if (!validVersion) {
+        throw new PythonInvalidVersionError(`version ${version} is not compatible with semver and cannot be compared`);
+    }
+    return {
+        name: name.toLowerCase(),
+        version: validVersion.toString(),
+        dependencies,
+    };
 }
 exports.getPackageInfo = getPackageInfo;
 // parse a line containing a dependency package name and (optional) specifier + version
@@ -160691,6 +160708,9 @@ function parseDependency(packageDependency) {
         specifier: correctedSpecifier,
     };
 }
+class PythonInvalidVersionError extends Error {
+}
+exports.PythonInvalidVersionError = PythonInvalidVersionError;
 //# sourceMappingURL=metadata-parser.js.map
 
 /***/ }),