<p> A utility class to extract version numbers from file names (or other strings containing version numbers.</p> <pre> Example: Give the file name: li

Set the value of version. @param version new value of version

@param name the name to set

Get the CVSS V2 scoring information. @return the CVSS V2 scoring information

Calculates the SHA1 checksum of a specified file. @param file the file to generate the MD5 checksum @return the hex representation of the SHA1 hash @

Sets the file name to display in reports. @param displayName the name to display

Resets the filter. This must be manually called between searching and indexing. Unable to rely on `reset` as it appears to be called between terms. @

Creates a prepared statement from the given key. The SQL is stored in a properties file and the key is used to lookup the specific query. @param conn

Returns whether or not any properties are set. @return whether or not any properties are set

Scans an array of files or directories. If a directory is specified, it will be scanned recursively. Any dependencies identified are added to the depe

@param version the version to set

Constructs a new database connection object per the database configuration. @return a database connection object @throws DatabaseException thrown if

Parses the arguments passed in and captures the results for later use. @param args the command line arguments @throws FileNotFoundException is thrown

Filters a given iterator. @param iterator the iterator to filter @return the filtered iterator

Get the value of confidence. @return the value of confidence

Returns the settings for the test cases. @return

Retrieves the vulnerabilities associated with the specified CPE. @param cpe the CPE to retrieve vulnerabilities for @return a list of Vulnerabilities

Removes the dependency. @param dependency the dependency to remove.

Add to the set of filenames to accept for analysis. Case-sensitivity is assumed. @param names one or more filenames to accept for analysis @return th

Get the CVSS V3 scoring information. @return the CVSS V3 scoring information

Calculates the MD5 checksum of a specified file. @param file the file to generate the MD5 checksum @return the hex representation of the MD5 hash @th

Get the unmodifiable sorted set of vulnerabilities. @return the unmodifiable sorted set of vulnerabilities

Retrieves an iterator for the version parts. @return an iterator for the version parts

Sets the file name of the dependency. @param fileName the file name of the dependency

Constructs a new OSS Index Client. @param settings the configured settings @return a new OSS Index Client

Get the value of id. @return the value of id

Get the value of source. @return the value of source

Returns whether or not this dependency is virtual or not. Virtual dependencies are specified during object constructor. No setter. @return true if De

Add to the set of file extensions to accept for analysis. Case-insensitivity is assumed. @param extensions one or more file extensions to accept for

Builds an npm audit API payload. @param lockJson the package-lock.json @param packageJson the package.json @param dependencyMap a collection of modul

Calculates the SH256 checksum of a specified file. @param file the file to generate the MD5 checksum @return the hex representation of the SHA1 hash

Returns the SHA1 Checksum of the dependency. @return the SHA1 Checksum

Sets the file path of the dependency. @param filePath the file path of the dependency

Get the value of pomUrl. @return the value of pomUrl

Returns the given resource as an InputStream using the object's class loader. @param o the object used to obtain a reference to the class loader @par

Returns the temporary directory. @return the temporary directory @throws java.io.IOException if any.

Standard implementation of toString(). @return the String representation of the object

Determines if an update to the current data store is needed, if it is the new data is downloaded from the Internet and imported into the current cache

Loads the specified class using the system class loader and registers the driver with the driver manager. @param className the fully qualified name o

Normalizes null and empty strings to null for consistent comparison. @param s the string to normalize @return null if s is null or empty, otherwise s

Set the value of name @param name new value of name

Determines if the file can be analyzed by the analyzer. If the npm analyzer are enabled the archive analyzer will skip the node_modules and bower_modu

The HintAnalyzer uses knowledge about a dependency to add additional information to help in identification of identifiers or vulnerabilities. @param

Get the value of URL. @return the value of URL

Sets a property value only if the value is not null. @param key the key for the property @param value the value for the property

Implementation of the comparable interface. @param o the evidence being compared @return an integer indicating the ordering of the two objects

Initializes the analyzer with the configured settings. @param settings the configured settings to use

Searches the configured Nexus repository for the given sha1 hash. If the artifact is found, a <code>MavenArtifact</code> is populated with the coordin

Starts the processing of the `process`.

Estimates the CVSS V2 Score based on a given severity. The implementation will default to 3.9 if no recognized "severity" level is given (critical, hi

Gets the artifactId. @return the artifactId

Get the value of error. @return the value of error

Returns a value from the properties file as a File object. If the value was specified as a system property or passed in via the -Dprop=value argument

Get the value of name. @return the value of name

Retrieve an object from the objects collection. @param key the key to retrieve the object @return the object

Returns a reference to the current project. This method is used instead of auto-binding the project via component annotation in concrete implementatio

Retrieves the severity a {@link Source} has assigned for which a CVSS score is not available. Severity could be anything ranging from 'critical', 'hig

<p> This method is only public for unit/integration testing. This method should not be called by any integration that uses dependency-check-core.</p>

Processes a given dependency to determine if any CPE, CVE, CWE, or CVSS scores should be suppressed. If any should be, they are removed from the depen

Runs the analyzers against all of the dependencies. Since the mutable dependencies list is exposed via {@link #getDependencies()}, this method iterate

<p> Builds a Lucene search string by properly escaping data and constructing a valid search query.</p> <p> If either the possibleVendor or possiblePr

Get the value of dataDirectory. @return the value of dataDirectory

Gets the groupId. @return the groupId

Returns the value. @return the value

Get the value of value. @return the value of value

<p> A utility function that will interpolate strings based on values given in the properties file. It will also interpolate the strings contained with

Sets the value of the caseSensitive property. @param value whether the value is case sensitive

Sets a property value. @param key the key for the property @param value the value for the property

Standard implementation of toString showing vendor and product. @return the string representation of the object

Adds an entry to the list of detected vulnerable software identifiers for the dependency file. @param identifier a reference to the identifier to add

Initialize the Downloader from the settings. Extracts the configured proxy- and credential information from the settings and system properties and cac

Determines if the given file contains the given regular expression. @param file the file to test @param pattern the pattern used to test the file @re

Converts a date in the form of yyyy-MM-dd into the epoch milliseconds. @param date a date in the format of yyyy-MM-dd @return seconds

Get the value of name. @return the value of name

Returns whether there is another item. @return <code>true</code> if there is another item; otherwise <code>false</code>.

Adds the relatedDependency to the dependency's related dependencies. @param dependency the main dependency @param relatedDependency a collection of d

Converts an attribute value representing an xsd:boolean value to a boolean using the rules as stated in the XML specification. @param lexicalXSDBoole

Reads the standard output and standard error from the process and waits for the process to complete. @throws InterruptedException thrown if the proce

Set the value of license. @param license new value of license

Sets whether the value property is a regex. @param value true if the value is a regex, otherwise false

Helper method to add a nullable string parameter. @param ps the prepared statement @param pos the position of the parameter @param value the value of

Evaluates the target against the version and version range checks: versionEndExcluding, versionStartExcluding versionEndIncluding, and versionStartInc

Determines the severity from the score. @param score the score @return the severity

Executes the dependency-check and generates the report. @return a reference to the engine used to perform the scan. @throws org.owasp.dependencycheck

Determines if the given identifiedVersion is affected by the given cpeId and previous version flag. A non-null, non-empty string passed to the previou

Get the project. @return the project

Returns whether or not the value is a regex. @return true if the value is a regex, otherwise false

Determines if the 'scan' command line argument was passed in. @return whether or not the 'scan' command line argument was passed in

Sets the CVSS V2 scoring information. @param cvssV2 the CVSS V2 scoring information