lib/spandx/php/parsers/composer.rb in spandx-0.13.4 vs lib/spandx/php/parsers/composer.rb in spandx-0.13.5

@@ -8,10 +8,10 @@
           path.basename.fnmatch? 'composer.lock'
         end
 
         def parse(path)
           items = Set.new
-          composer_lock = JSON.parse(path.read)
+          composer_lock = Oj.load(path.read)
           composer_lock['packages'].concat(composer_lock['packages-dev']).each do |dependency|
             items.add(map_from(path, dependency))
           end
           items
         end