Precondition
- [ X] I checked the issues list for existing open or closed reports of the same problem.
Describe the bug
When trying to run on my local ubuntu 22.04 laptop, I have got an error that seems related to yarn :
[WARNING] An unexpected error occurred during analysis of '/tmp/dctemp98af9c47-82c5-45e1-b705-45212f70e500/check12211452104991911139tmp/7489/META-INF/resources/webjars/combined-stream/1.0.8/yarn.lock' (Yarn Audit Analyzer): Invalid version string format
[ERROR]
java.lang.IllegalStateException: Invalid version string format
at org.owasp.dependencycheck.analyzer.YarnAuditAnalyzer.getYarnMajorVersion (YarnAuditAnalyzer.java:119)
at org.owasp.dependencycheck.analyzer.YarnAuditAnalyzer.analyzeDependency (YarnAuditAnalyzer.java:267)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze (AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:317)
at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1144)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:642)
at java.lang.Thread.run (Thread.java:1583)
Caused by: org.semver4j.SemverException: Version [0.32+git] is not valid semver.
at org.semver4j.internal.StrictParser.parse (StrictParser.java:33)
at org.semver4j.Semver.<init> (Semver.java:38)
at org.owasp.dependencycheck.analyzer.YarnAuditAnalyzer.getYarnMajorVersion (YarnAuditAnalyzer.java:116)
at org.owasp.dependencycheck.analyzer.YarnAuditAnalyzer.analyzeDependency (YarnAuditAnalyzer.java:267)
at org.owasp.dependencycheck.analyzer.AbstractAnalyzer.analyze (AbstractAnalyzer.java:131)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:88)
at org.owasp.dependencycheck.AnalysisTask.call (AnalysisTask.java:37)
at java.util.concurrent.FutureTask.run (FutureTask.java:317)
at java.util.concurrent.ThreadPoolExecutor.runWorker (ThreadPoolExecutor.java:1144)
at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:642)
at java.lang.Thread.run (Thread.java:1583)
Version of dependency-check used
maven plugin version 12.1.0
Precondition
Describe the bug
When trying to run on my local ubuntu 22.04 laptop, I have got an error that seems related to yarn :
Version of dependency-check used
maven plugin version 12.1.0