Hacktoberfest 2026: le issue che i maintainer hanno segnato per ottobre, aperte e adatte ai principianti. Sfoglia le issue Hacktoberfest

[BUG][code-analyzer] PMD NullPointerException scanning two LWC JavaScript files

Aperta
  • Qualcosa non va?
#2,100 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub

Nessuno ha ancora preso questa issue.

Valutazione

Difficoltà
4/5
Tempo stimato
3-5 giorni
Idoneità per principianti
48/100
Tipo di issue
Bug
Chiarezza
Abbastanza chiara
Stato di attività
Attiva
Stack tecnologico
java, javascript
Ambito
security, tooling

Direzione di ricerca

Start by running the documented sf code-analyzer run command with the AppExchange and Recommended:Security selectors against the workspace containing owJobDetail.js and owJobList.js. Investigate the PMD processing error and request a reduced reproduction because the source files are private. Done means both files are analyzed without a NullPointerException, or unsupported syntax produces a diagnostic identifying its location.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Descrizione

Have you tried to resolve this issue yourself first?
  • I confirm I have gone through the above steps and still have an issue to report.
Bug Description

Salesforce Code Analyzer's PMD engine throws a NullPointerException while scanning two Lightning Web Component JavaScript files, owJobDetail.js and owJobList.js. The scan produces an HTML report, but PMD does not complete analysis of those files.

The error occurred with Code Analyzer 5.13.0 and reproduced with 5.16.0 using the AppExchange and Recommended:Security rule selectors. I need a complete scan for a managed-package security review.

Output / Logs
PMD issued a processing error for owJobDetail.js:
NullPointerException: Cannot invoke "org.mozilla.javascript.ast.Name.visit(org.mozilla.javascript.ast.NodeVisitor)" because "this.varName" is null

PMD issued the same processing error for owJobList.js.

The run generated an HTML report with 15 violations (12 High, 3 Moderate), but PMD did not complete analysis of these two JavaScript files.
Steps To Reproduce
  1. From the root of a Salesforce project containing the two LWC JavaScript files, run:

sf code-analyzer run --rule-selector AppExchange --rule-selector Recommended:Security --workspace packages/ondaworx-job-board --output-file ../ow-job-board-security-review/CodeAnalyzerReport-v5.16.html

  1. Observe PMD processing errors for owJobDetail.js and owJobList.js.
  2. The same error occurred with plugin versions 5.13.0 and 5.16.0 on this Mac. The source is in a private managed-package repository, so I have not attached it publicly.
Expected Behavior

PMD should analyse both JavaScript files and either report rule violations or complete without a processing error. If the syntax is unsupported, it should provide a diagnostic that identifies the relevant syntax and location.

Operating System

macOS 26.5.2

Salesforce CLI Version

@salesforce/cli/2.141.6 darwin-x64 node-v22.22.3

Code Analyzer Plugin (code-analyzer) Version

code-analyzer 5.16.0

Node Version

v26.5.0

Java Version

openjdk version "21.0.12.1" 2026-08-18

Python Version

No response

Additional Context (Screenshots, Files, etc)

This scan is needed for a Salesforce managed-package security review. I have reproduced the error twice on this Mac with different plugin versions. I have not tested it on a second computer. I can provide further diagnostic information or a reduced reproduction if requested.

Workaround

No workaround found. Updating Code Analyzer from 5.13.0 to 5.16.0 did not resolve the error.

Urgency

High

Lingua principale
TypeScript
Stelle
240
Fork
52
Nessuna PR unita negli ultimi 30g

Preparare l'ambiente

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di forcedotcom/code-analyzer

Tutte le issue di forcedotcom/code-analyzer

Issue simili

Altre issue su TypeScript

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.