Artifactory will throw a NPE when trying to merge metadata of a package that has no "time" closure in it. It will happen only with virtual repositories.
See the fully attached stack trace.
1.Create a virtual NPM repository, a local repository, and a remote repository to registry.npmjs.org (put both under the virtual)
2.Create an NPM package and call it "logger" (by running the npm init command from the client). Push the package to the local NPM repo you created.
3. Try to resolve http://localhost:8080/artifactory/api/npm/npm-virtual/logger from the virtual repository -> observe the 500 response and the NPE on the log.