diff --git a/syft/cataloger/javascript/parse_package_json.go b/syft/cataloger/javascript/parse_package_json.go index ac22bf2a8..1a8db0a51 100644 --- a/syft/cataloger/javascript/parse_package_json.go +++ b/syft/cataloger/javascript/parse_package_json.go @@ -133,6 +133,11 @@ func licenseFromJSON(b []byte) (string, error) { } func licensesFromJSON(p PackageJSON) ([]string, error) { + if p.License == nil && p.Licenses == nil { + // This package.json doesn't specify any licenses whatsoever + return []string{}, nil + } + singleLicense, err := licenseFromJSON(p.License) if err == nil { return []string{singleLicense}, nil