publish: Throw an error if the bundled deps package.json entry is invalid

1 files changed, 6 insertions, 0 deletions

diff --git a/lib/utils/tar.js b/lib/utils/tar.js
index 3d0557e68..59ade0e24 100644
--- a/lib/utils/tar.js
+++ b/lib/utils/tar.js
@@ -137,6 +137,12 @@ function nameMatch (name) { return function (other) { return name === other.pack
 BundledPacker.prototype.isBundled = function (name) {
   var bd = this.package && this.package.bundleDependencies
   if (!bd) return false
+
+  if (!Array.isArray(bd)) {
+    throw new Error(this.package.name + '\'s `bundledDependencies` should ' +
+                    'be an array')
+  }
+
   if (bd.indexOf(name) !== -1) return true
   var pkg = this.tree.children.filter(nameMatch(name))[0]
   if (!pkg) return false