Converts a textual severity to the text that should be used to signal it in a report. @param severity The textual unscored severity @return The sever

Updates the EcoSystem Cache. @return The number of records updated by the DB_ECOSYSTEM_CACHE update script.

Merges the list of known exploited vulnerabilities into the database. @param vulnerabilities the list of known exploited vulnerabilities @throws Data

Used when updating a vulnerability - this method inserts the vulnerability entry itself. @param cve the CVE data @param description the description o

Updates the database schema by loading the upgrade script for the version specified. The intended use is that if the current schema version is 2.9 the

Updates the vulnerability within the database. If the vulnerability does not exist it will be added. @param cve the vulnerability from the NVD CVE Da

Used when updating a vulnerability - this method inserts the CWE entries. @param vulnerabilityId the vulnerability ID @param cve the CVE entry that c

Used when updating a vulnerability - this method inserts the list of references. @param vulnerabilityId the vulnerability id @param cve the CVE entry

Used when updating a vulnerability - this method inserts the list of vulnerable software. @param vulnerabilityId the vulnerability id @param cveId th

Determine if a proxy should be used for the Nexus Analyzer. @return {@code true} if a proxy should be used

Validates that the command line arguments are valid. @throws FileNotFoundException if there is a file specified by either the SCAN or CPE command lin

Validate the FileImpl result for usability as a dependency. <br/> Checks that the file actually matches all known hashes and the path appears to match

Checks whether the value of the evidence matches this matcher. When {@link #isRegex()} is {@code true} value is used as a {@link java.util.regex.Patte

Ensures that the CPE Identified matches the dependency. This validates that the product, vendor, and version information for the CPE are contained wit

Returns true if the two dependencies have the same vulnerabilities. @param dependency1 a dependency2 to compare @param dependency2 a dependency2 to c

If a CPE product word represents the ecosystem of a dependency it is not required to appear in the dependencyName to still consider the CPE product a

Constructs a new AbstractTokenizingFilter. @param stream the TokenStream that this filter will process

Constructs a new AlphaNumericFilter. @param stream the TokenStream that this filter will process

Creates a new AnalysisException.

Creates a new analysis task. @param analyzer a reference of the analyzer to execute @param dependency the dependency to analyze @param engine the dep

Creates a new instance of AnalyzerService. @param classLoader the ClassLoader to use when dynamically loading Analyzer and Update

Constructor. @param name the logger name

Empty constructor for utility class.

Builds the App object.

Make java compiler happy.

Creates a new ArchiveExtractionException.

Constructs a new ArtifactScopeExcluded object. @param skipTestScope whether or not to skip the test scope @param skipProvidedScope whether or not to

Creates a new instance. @param excludeRegex The regular expression to match the artifacts type against

Creates a ArtifactorySearch for the given repository URL. @param settings the configured settings

Creates a response handler for the response on a single dependency-search attempt. @param sourceUrl The search request URL @param dependency The depe

Constructs a new processor to consume the output of `bundler-audit`. @param gemDependency a reference to `gem.lock` dependency @param engine a refere

Creates a NexusSearch for the given repository URL. @param settings the configured settings @throws MalformedURLException thrown if the configured UR

Construct a new DependencyCheckTask.

Private constructor for a utility class.

<p> Stores information about a given class name. This class will keep the fully qualified class name and a list of the important parts of the package

Constructs a new CLI Parser object with the configured settings. @param settings the configured settings

Create a ComposerDependency from group, project, and version. @param group the group @param project the project @param version the version

Creates a ComposerException with default message.

Creates a ComposerLockParser from a JsonReader and an InputStream. @param inputStream the InputStream to parse @param skipDev whether to skip dev dep

Creates an CorruptDatabaseException. @param msg the exception message

Create a new CorruptedDatastreamException.

Constructs a new CPE Identifier from a CPE object with the given confidence. @param cpe the CPE value @param confidence the confidence in the identif

private constructor for singleton.

Construct a new CPE plus object. @param cpe the CPE @param ecosystem the ecosystem

Constructs a CVE Item Source record. @param inputStream the input source to read from @throws IOException thrown if there is an issue reading from th

Creates a new CveDB object and opens the database connection. Note, the connection must be closed by the caller by calling the close method. @param s

Constructs a new CVE Item Operator utility. @param cpeStartsWithFilter the filter to use for CPE entries

Empty private constructor as this is a utility class.

Private constructor for a utility class.

Creates a new generic JCS wrapper. @param cache a reference to the underlying cache implementation.

Creates the data cache factory. @param settings the configuration settings

Creates an DatabaseException. @param msg the exception message

Private constructor for this factory class; no instance is ever needed. @param settings the configured settings @throws DatabaseException thrown if w

Constructs a new data properties object. @param cveDB the database object holding the properties

Private constructor for utility class.

Constructs a new Dependency object.

Creates a new DependencyNotFoundException.

Constructor for a empty DependencyVersion.

Private constructor for utility class.

Constructs a new description ecosystem mapper.

Constructs a new keyword hint. @param keyword the keyword contained in CVE descriptions @param ecosystem the ecosystem identified by the keyword

Creates a new DownloadFailedException.

Simple constructor for the callable download task. @param url the file to download @param processor the processor service to submit the downloaded fi

Creates an DriverLoadException. @param msg the exception message

Private constructor for a utility class.

Constructs a new wrapper around a Driver. @param driver the database driver to wrap

Instantiates the ecosystem utility class. @param settings the ODC configuration

Creates a new {@link Mode#STANDALONE} Engine. @param settings reference to the configured settings

Constructs a new engine version check utility for testing. @param settings the configured settings

Creates a new Evidence object.

Creates a new EvidenceMatcher objects. @param source the source of the evidence, a source that is {@code null} indicates any source should match. @pa

Instantiates a new exception collection. @param exceptions a list of exceptions

Constructs a new ExpectedOjectInputStream that can be used to securely deserialize an object by restricting the classes that can deserialized to a kno

Constructs a repsonse handler to transfor the binary contents received using the given Charset. @param charset The Charset to be used to transform a

Creates a new ExtractionException.

Private constructor for a utility class.

Private constructor as this is more of an enumeration rather then a full class.

Private constructor for a utility class.

Constructs a new hint for the given file extension and ecosystem. @param extension the file extension to identify the given ecosystem @param ecosyste

Private constructor for a utility class.

Creates a dependency node visitor that delegates nodes that are accepted by the specified filter to the specified visitor. @param visitor the depende