fix: We shouldn't assume that the package info will be not null or valid

fix: We shouldn't assume that the package info will be not null or valid #399