Merge pull request #7 from magento-cia/AC-3492

AC-3492: Fix undefined variable error in plugin.

Author: admanesachin

composer.json

@@ -2,7 +2,7 @@
   "name": "magento/composer-dependency-version-audit-plugin",
   "type": "composer-plugin",
   "description": "Validating packages through a composer plugin",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "license": [
     "OSL-3.0"
   ],

src/Plugin.php

@@ -217,6 +217,7 @@ public function packageUpdate(PackageEvent $event): void
         if(!$isPackageVBE) {
             foreach ($this->composer->getRepositoryManager()->getRepositories() as $repository) {
                 $found = $this->versionSelector->findBestCandidate($this->composer, $packageName, $repository);
+                $repoUrl = "";
                 /** @var RepositoryInterface $repository */
                 if ($repository instanceof ComposerRepository) {
                     $repoUrl = $repository->getRepoConfig()['url'];
@@ -225,7 +226,7 @@ public function packageUpdate(PackageEvent $event): void
                     $repoUrl = $repository->getRepository()->getRepoConfig()['url'];
                 }
                 if ($found) {
-                    if (strpos($repoUrl, self::URL_REPO_PACKAGIST) !== false) {
+                    if ($repoUrl && strpos($repoUrl, self::URL_REPO_PACKAGIST) !== false) {
                         $publicRepoVersion = $found->getFullPrettyVersion();
                     } else {
                         $currentPrivateRepoVersion = $found->getFullPrettyVersion();