add support for missing repo in package.json
don’t segfault on broken json
support for version “*”