In parse check if sri is an object

[vjpr]

https://github.com/zkat/ssri/blob/latest/index.js#L121-L133

module.exports.parse = parse
function parse (sri, opts) {
  opts = opts || {}
  if (typeof sri === 'string') {
    return _parse(sri, opts)
  } else if (sri.algorithm && sri.digest) {
    const fullSri = new Integrity()
    fullSri[sri.algorithm] = [sri]
    return _parse(stringify(fullSri, opts), opts)
  } else {
    return _parse(stringify(sri, opts), opts)
  }
}

There is a check for typeof string, then a check for sri.algorithm && ..., then an else condition.

I suggest checking if sri is an object before trying to access a property on it.

I understand that exhaustive type-checking of arguments adds noise, but in this case the function is doing some type checking already so it might make sense to be more explicit.

We had an issue over at pnpm where we didn't pass in the sri by accident. pnpm/pnpm#1324