We used to scan our repository using the latest version of sourceclear, but we noticed that the versions 3.8.31, 3.8.32 and 3.8.33 of sourceclear print a java stacktrace ( a NullPointerException) and the classic json output. Is this a known issue?

Here is the command line:

 curl --silent --show-error --location https://download.sourceclear.com/ci.sh \

  | sh -s -- \

   scan \

   --recursive \

   --scan-collectors 'npm, maven' \

   --json

Here are the first lines of the output:

java.lang.NullPointerException

at java.base/java.util.Objects.requireNonNull(Unknown Source)

at java.base/sun.nio.fs.UnixFileSystem.getPath(Unknown Source)

at java.base/java.nio.file.Path.of(Unknown Source)

at java.base/java.nio.file.Paths.get(Unknown Source)

at com.sourceclear.analysis.latte.staticCG.ExportsFinder.merge(ExportsFinder.kt:107)

at com.sourceclear.analysis.latte.staticCG.ExportsFinder.visitFile(ExportsFinder.kt:91)

at com.sourceclear.analysis.latte.staticCG.ExportsFinder.visitFile(ExportsFinder.kt:62)

at com.sourceclear.analysis.latte.staticCG.ExportsFinder.findExports(ExportsFinder.kt:30)

at com.sourceclear.analysis.latte.staticCG.JavaScriptCallGraphs$Companion.of(JavaScriptCallGraphs.kt:60)

at com.sourceclear.analysis.latte.staticCG.JavaScriptCallGraphs$Companion.of(JavaScriptCallGraphs.kt:31)

at com.sourceclear.methods.js.JSCallGraphBuilder.build(JSCallGraphBuilder.java:101)

at com.sourceclear.methods.CallGraphBuilder.build(CallGraphBuilder.java:47)

at com.sourceclear.methods.VulnerablePartsDetector.scan(VulnerablePartsDetector.java:65)

at com.sourceclear.engine.methods.SimpleDirectoryMethodScanBatcher.batch(SimpleDirectoryMethodScanBatcher.java:54)

at com.sourceclear.engine.methods.BaseMethodsEngine.innerScanMethods(BaseMethodsEngine.java:114)

at com.sourceclear.engine.methods.JSMethodsEngine.scanMethods(JSMethodsEngine.java:56)

at com.sourceclear.engine.methods.VulnerableMethodsCollatorImpl.scanPath(VulnerableMethodsCollatorImpl.java:206)

at com.sourceclear.engine.scan.LibraryGraphContainerScanner.doVulnMethodsScan(LibraryGraphContainerScanner.java:227)

at com.sourceclear.agent.services.ScanServiceImpl.buildReport(ScanServiceImpl.java:243)

at com.sourceclear.agent.commands.ScanCommand.lambda$executeRepoScan$5(ScanCommand.java:862)

at com.sourceclear.agent.commands.ScanCommand.handleScanErrors(ScanCommand.java:1034)

at com.sourceclear.agent.commands.ScanCommand.executeRepoScan(ScanCommand.java:851)

at com.sourceclear.agent.commands.ScanCommand.execute(ScanCommand.java:539)

at com.sourceclear.agent.EntryPointImpl.runVerb(EntryPointImpl.java:382)

at com.sourceclear.agent.EntryPointImpl.dispatchVerbOptions(EntryPointImpl.java:331)

at com.sourceclear.agent.EntryPointImpl.apply(EntryPointImpl.java:156)

at com.sourceclear.agent.Main.start(Main.java:118)

at com.sourceclear.agent.Main.main(Main.java:123)

{

"metadata" : {

"requestDate" : "2023-06-13T13:35:37.076+00:00"

},

[...]

}