lib/licensed/sources/npm.rb in licensed-3.4.3 vs lib/licensed/sources/npm.rb in licensed-3.4.4

- old
+ new

@@ -145,10 +145,16 @@ return true if dependency["missing"] dependency.empty? && parent&.dig("peerDependenciesMeta", name, "optional") end def peer_dependency(parent, name) - parent&.dig("peerDependencies", name) + return unless parent.is_a?(Hash) + + peerDependencies = parent["peerDependencies"] + # "peerDependencies" could be set to the string "[Circular]" + return unless peerDependencies.is_a?(Hash) + + peerDependencies[name] end def extract_version(parent, name) parent&.dig("_dependencies", name) || peer_dependency(parent, name) end