fix: support libraries without organization prefix (#335)

* fix: support libraries without organization prefix * chore: update @nodesecure/ossf-scorecard-sdk
NodeSecure · Mar 11, 2024 · 6698c9f · 6698c9f
1 parent 61d1f9f
commit 6698c9f
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 2 deletions.
diff --git a/package.json b/package.json
@@ -38,7 +38,7 @@
   "homepage": "https://github.com/NodeSecure/report#readme",
   "dependencies": {
     "@nodesecure/flags": "^2.4.0",
-    "@nodesecure/ossf-scorecard-sdk": "^3.2.0",
+    "@nodesecure/ossf-scorecard-sdk": "^3.2.1",
     "@nodesecure/rc": "^1.5.0",
     "@nodesecure/scanner": "^5.2.1",
     "@nodesecure/utils": "^1.2.0",

diff --git a/src/analysis/extractScannerData.js b/src/analysis/extractScannerData.js
@@ -75,7 +75,8 @@ export async function buildStatsFromNsecurePayloads(payloadFiles = [], options =
 
       if (!(name in stats.packages)) {
         const isGiven = config.npm?.packages.includes(name);
-        const fullName = isGiven ? `${config.npm.organizationPrefix}/${name}` : name;
+        const org = config.npm?.organizationPrefix;
+        const fullName = isGiven && org ? `${org}/${name}` : name;
         if (isThird) {
           stats.packages_count.external++;
         }