From 77a7fb466f964fbffcc6b29946ecb60464cb1718 Mon Sep 17 00:00:00 2001
From: Hoangg Anh <131897682+LucciHank@users.noreply.github.com>
Date: Thu, 2 Apr 2026 11:25:47 +0700
Subject: [PATCH] refactor: parsepackagestring crashes on undefined
 packagestring

When ctx.query.package is absent, packageQuery is undefined. Calling parsePackageString(undefined) does `undefined.lastIndexOf` which throws TypeError. This crashes the exports/exportSizes middleware on any request missing the package query param (or malformed requests), taking down the response.

Affected files: common.utils.js

Signed-off-by: Hoangg Anh <131897682+LucciHank@users.noreply.github.com>
---
 utils/common.utils.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/utils/common.utils.js b/utils/common.utils.js
index ddbb7f42..06b11e62 100644
--- a/utils/common.utils.js
+++ b/utils/common.utils.js
@@ -4,6 +4,7 @@
 const DOMPurify = require('dompurify')
 
 function parsePackageString(packageString) {
+  if (typeof packageString !== 'string') return { name: null, version: null, scoped: false }
   // Scoped packages
   let name,
     version,