| Package | Description |
|---|---|
| org.owasp.dependencycheck.analyzer |
Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.
|
| org.owasp.dependencycheck.data.cache |
Implements a generic persisted cache that can be used to store results of external analysis between executions.
|
| org.owasp.dependencycheck.data.nodeaudit |
Contains classes related to searching via Node Audit API.
These are used to abstract Node Audit searching away from OWASP Dependency Check so they can be reused elsewhere. |
| Modifier and Type | Method and Description |
|---|---|
protected void |
AbstractNpmAnalyzer.processResults(java.util.List<Advisory> advisories,
Engine engine,
Dependency dependency,
org.apache.commons.collections4.MultiValuedMap<java.lang.String,java.lang.String> dependencyMap)
Processes the advisories creating the appropriate dependency objects and
adding the resulting vulnerabilities.
|
| Modifier and Type | Method and Description |
|---|---|
DataCache<java.util.List<Advisory>> |
DataCacheFactory.getNodeAuditCache()
Returns the data cache for Node Audit.
|
| Modifier and Type | Method and Description |
|---|---|
java.util.List<Advisory> |
NpmAuditParser.parse(org.json.JSONObject jsonResponse)
Parses the JSON response from the NPM Audit API.
|
java.util.List<Advisory> |
NodeAuditSearch.submitPackage(javax.json.JsonObject packageJson)
Submits the package.json file to the Node Audit API and returns a list of
zero or more Advisories.
|
Copyright© 2012-21 Jeremy Long. All Rights Reserved.