From fbd38540c22e1de73c78304e3d9b865a9f52ddcb Mon Sep 17 00:00:00 2001
From: Gareth Jones <jones258@gmail.com>
Date: Thu, 25 Jul 2024 09:36:24 +1200
Subject: [PATCH] fix: handle parsing versions in `composer.lock` files that
 are numbers rather than strings

---
 pkg/lockfile/parse-composer-lock.go | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/pkg/lockfile/parse-composer-lock.go b/pkg/lockfile/parse-composer-lock.go
index 8546d595c7..cce20d3405 100644
--- a/pkg/lockfile/parse-composer-lock.go
+++ b/pkg/lockfile/parse-composer-lock.go
@@ -14,6 +14,33 @@ type ComposerPackage struct {
 	} `json:"dist"`
 }
 
+// UnmarshalJSON for ComposerPackage to handle Version being either a string or number
+func (cp *ComposerPackage) UnmarshalJSON(data []byte) error {
+	type alias ComposerPackage
+	var raw struct {
+		Version any `json:"version"`
+		*alias
+	}
+	raw.alias = (*alias)(cp)
+
+	if err := json.Unmarshal(data, &raw); err != nil {
+		return err
+	}
+
+	// it doesn't seem common, but composer doesn't seem to mind if a version
+	// somehow ends being a number instead of a string in it's lockfile
+	switch v := raw.Version.(type) {
+	case string:
+		cp.Version = v
+	case float64:
+		cp.Version = fmt.Sprintf("%.0f", v)
+	default:
+		return fmt.Errorf("unexpected type for version: %T", raw.Version)
+	}
+
+	return nil
+}
+
 type ComposerLock struct {
 	Packages    []ComposerPackage `json:"packages"`
 	PackagesDev []ComposerPackage `json:"packages-dev"`