Address review comments

Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>

Author: TG1999

vulnerabilities/importers/npm.py

@@ -105,31 +105,24 @@ def to_advisory_data(self, file: Path) -> List[AdvisoryData]:
             )
 
     def get_affected_package(self, data, package_name):
+        affected_version_range = None
+        unaffected_version_range = None
+        fixed_version = None
+
         vulnerable_range = data.get("vulnerable_versions") or ""
+        patched_range = data.get("patched_versions") or ""
 
-        # https://github.com/nodejs/security-wg/blob/main/vuln/npm/213.json#L14
+        # https://github.com/nodejs/security-wg/blob/cfaa51cc5c83f01eea61b69658f7bc76a77c5979/vuln/npm/213.json#L14
         if vulnerable_range == "<=99.999.99999":
             vulnerable_range = "*"
-
-        affected_version_range = (
-            NpmVersionRange.from_native(vulnerable_range) if vulnerable_range else None
-        )
-
-        if vulnerable_range == "*":
-            return AffectedPackage(
-                package=PackageURL(
-                    type="npm",
-                    name=package_name,
-                ),
-                affected_version_range=affected_version_range,
-            )
-
-        patched_range = data.get("patched_versions") or ""
-
-        unaffected_version_range = (
-            NpmVersionRange.from_native(patched_range) if patched_range else None
-        )
-        fixed_version = None
+        if vulnerable_range:
+            affected_version_range = NpmVersionRange.from_native(vulnerable_range)
+
+        # https://github.com/nodejs/security-wg/blob/cfaa51cc5c83f01eea61b69658f7bc76a77c5979/vuln/npm/213.json#L15
+        if patched_range == "<0.0.0":
+            patched_range = None
+        if patched_range:
+            unaffected_version_range = NpmVersionRange.from_native(patched_range)
 
         # We only store single fixed versions and not a range of fixed versions
         # If there is a single constraint in the unaffected_version_range