From 568b7601bb4c1845be548e29074b1d0d81f0d90c Mon Sep 17 00:00:00 2001 From: Chris Greeno Date: Wed, 10 Dec 2025 18:42:09 +0000 Subject: [PATCH] fix(javascript): remove debug print statement in dependency parser (#4412) Removes an accidental `fmt.Println("error", err)` that was left in the javascript dependency parser. This causes noisy output to stdout when parsing npm package-lock.json files that contain dependency specifiers that aren't valid PURLs. Signed-off-by: Chris Greeno --- syft/pkg/cataloger/javascript/dependency.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/syft/pkg/cataloger/javascript/dependency.go b/syft/pkg/cataloger/javascript/dependency.go index 1946f7ef4..eb5bdbcd2 100644 --- a/syft/pkg/cataloger/javascript/dependency.go +++ b/syft/pkg/cataloger/javascript/dependency.go @@ -27,8 +27,6 @@ func packageLockDependencySpecifier(p pkg.Package) dependency.Specification { // if the package url is valid, include the name from the package url since this is likely an alias var fullName = fmt.Sprintf("%s/%s", purl.Namespace, purl.Name) requires = append(requires, fullName) - } else { - fmt.Println("error", err) } requires = append(requires, name)