Merge pull request #77 from siketyan/versioning/fix-composer-hash-null

🐛 Fix failing to check composer.lock with path sources
siketyan · Dec 22, 2021 · 5b1d0b9 · 5b1d0b9
2 parents 1fc0965 + 93821d8
commit 5b1d0b9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/src/Scanner/Composer/ComposerLockParser.php b/src/Scanner/Composer/ComposerLockParser.php
@@ -50,7 +50,7 @@ public function parse(?string $json): DependencyCollection
         foreach ($packages as $package) {
             $name = $package['name'];
             $version = $package['version'];
-            $hash = $package['source']['reference'];
+            $hash = $package['dist']['reference'] ?? '';
             $package = $this->packagePool->get($name);
 
             if ($package === null) {

diff --git a/tests/Scanner/Composer/ComposerLockParserTest.php b/tests/Scanner/Composer/ComposerLockParserTest.php
@@ -23,7 +23,7 @@ class ComposerLockParserTest extends TestCase
         {
             "name": "foo/bar",
             "version": "v1.2.3.4",
-            "source": {
+            "dist": {
                 "reference": "hash"
             }
         }
@@ -32,7 +32,7 @@ class ComposerLockParserTest extends TestCase
         {
             "name": "bar/baz",
             "version": "3.2.1",
-            "source": {
+            "dist": {
                 "reference": "hash"
             }
         }