fix: handle empty package supplier name in SPDX

Closes #92.
snyk · Dec 11, 2024 · 2feb3a1 · 2feb3a1
1 parent b0523a0
commit 2feb3a1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/ecosystems/enrich_spdx.go b/lib/ecosystems/enrich_spdx.go
@@ -76,7 +76,7 @@ func enrichSPDXSupplier(pkg *v2_3.Package, data *packages.Package) {
 	if data.RepoMetadata != nil {
 		meta := *data.RepoMetadata
 		if ownerRecord, ok := meta["owner_record"].(map[string]interface{}); ok {
-			if name, ok := ownerRecord["name"].(string); ok {
+			if name, ok := ownerRecord["name"].(string); ok && name != "" {
 				pkg.PackageSupplier = &common.Supplier{
 					SupplierType: "Organization",
 					Supplier:     name,