Determines if the file can be analyzed by the analyzer. @param pathname the path to the file @return true if the file can be analyzed by the given an

Wraps the underlying driver's call to acceptsURL. Returns whether or not the driver can open a connection to the given URL. @param url the URL of the

Adds the shutdown hook. @param lock the Write Lock reference

Add a report format. <p> This is called by Ant with the configured {@link ReportFormat}. @param reportFormat the reportFormat to add.

Add a regular expression to the set of retire JS content filters. <p> This is called by Ant. @param retireJsFilter the regular expression used to fil

Add a regular expression to the set of retire JS content filters. <p> This is called by Ant. @param retireJsFilter the regular expression used to fil

Add a suppression file. <p> This is called by Ant with the configured {@link SuppressionFile}. @param suppressionFile the suppression file to add.

This method is only referenced in unused code and will likely break on MySQL if ever used due to the MERGE statement. <p> Merges CPE entries into the

Adds a set of Identifiers to the current list of vulnerable software identifiers. Only used for testing. @param identifiers A set of Identifiers

Analyzes the given dependency. The analysis could be anything from identifying an Identifier for the dependency, to finding vulnerabilities, etc. Addi

Analyzes a given dependency. If the dependency is an archive, such as a WAR or EAR, the contents are extracted, scanned, and added to the list of depe

Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency. @param dependency The Dependency to analyze. @p

Performs the analysis on a single Dependency. @param dependency the dependency to analyze @param engine the engine to perform the analysis under @thr

Determines if the analyzer can analyze the given file type. @param dependency the dependency to determine if it can analyze @param engine the depende

Analyzes poetry packages and adds evidence to the dependency. @param dependency the dependency being analyzed @param engine the engine being used to

Performs the analysis. @param dependency the dependency to analyze @param engine the engine @throws AnalysisException when there's an exception durin

Adds information about the known exploited vulnerabilities to the analysis. @param dependency The dependency being analyzed @param engine The scannin

Analyzes the dependencies and removes bad/incorrect CPE associations based on various heuristics. @param dependency the dependency to analyze. @param

Analyzes python packages and adds evidence to the dependency. @param dependency the dependency being analyzed @param engine the engine being used to

Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency. @param dependency The Dependency to analyze @pa

Analyzes go packages and adds evidence to the dependency. @param dependency the dependency being analyzed @param engine the engine being used to perf

Performs the analysis. @param dependency the dependency to analyze @param engine the engine @throws AnalysisException when there's an exception durin

Entry point for the analyzer. @param dependency the dependency to analyze @param engine the engine scanning @throws AnalysisException if there's a fa

Performs the analysis. @param dependency the dependency to analyze @param engine the engine @throws AnalysisException when there's an exception durin

Analyzes go packages and adds evidence to the dependency. @param dependency the dependency being analyzed @param engine the engine being used to perf

Analyzes the yarn lock file to determine vulnerable dependencies. Uses yarn audit --offline to generate the payload to be sent to the NPM API. @param

The HintAnalyzer uses knowledge about a dependency to add additional information to help in identification of identifiers or vulnerabilities. @param

Analyzes the specified JavaScript file. @param dependency the dependency to analyze. @param engine the engine that is scanning the dependencies @

Performs the analysis. @param dependency the dependency to analyze @param engine the engine @throws AnalysisException when there's an exception durin

Analyzes python packages and adds evidence to the dependency. @param dependency the dependency being analyzed @param engine the engine being used to

Analyzes a given dependency. If the dependency is an archive, such as a WAR or EAR, the contents are extracted, scanned, and added to the list of depe

Collects information about the file name. @param dependency the dependency to analyze. @param engine the engine that is scanning the dependencies @th

Performs the analysis. @param dependency the dependency to analyze @param engine the engine @throws AnalysisException when there's an exception durin

Analyzes python packages and adds evidence to the dependency. @param dependency the dependency being analyzed @param engine the engine being used to

Collects information about the file name. @param dependency the dependency to analyze. @param engine the engine that is scanning the dependencies @th

Analyzes a dependency and attempts to determine if there are any CPE identifiers for this dependency. @param dependency The Dependency to analyze. @p

Performs the analysis. @param dependency the dependency to analyze @param engine the engine @throws AnalysisException when there's an exception durin

Analyzes the pnpm lock file to determine vulnerable dependencies. Uses pnpm audit --json to vulnerabilities report from NPM API. @param dependency th

Determines if the analyzer can analyze the given file type. @param dependency the dependency to determine if it can analyze @param engine the depende

Analyzes a set of dependencies. If they have been found to have the same base path and the same set of identifiers they are likely related. The relate

Returns false; this mojo cannot generate a report. @return <code>false</code>

Returns false; this mojo cannot generate a report. @return <code>false</code>

Returns whether or not a the report can be generated. @return <code>true</code> if the report can be generated; otherwise <code>false</code>

Collects the body text of the node being processed. @param ch the char array of text @param start the start position to copy text from in the char ar

Collects the body text of the node being processed. @param ch the char array of text @param start the start position to copy text from in the char ar

Collects the body text of the node being processed. @param ch the char array of text @param start the start position to copy text from in the char ar

The close method is called after all of the dependencies have been analyzed. @throws Exception is thrown if an exception occurs closing the analyzer.

Releases the lock on the resource.

The close method does nothing for this Analyzer. @throws Exception thrown if there is an exception

Closes the CPE Index.

Throws any exceptions that occurred during processing. @throws IOException thrown if an IO Exception occurred @throws CpeValidationException thrown i

Throws any exceptions that occurred during processing. @throws GrokParseException thrown if there is an error parsing the output of GrokAssembly

Throws any exceptions that occurred during processing. @throws IOException thrown if there was an error reading from the process @throws AnalysisExce

Throws any exceptions that occurred during processing. @throws AnalysisException thrown if an AnalysisException occurred

Closes the data sources.

Removes resources used from the local file system. @throws Exception thrown if there is a problem closing the analyzer

Deletes any files extracted from the JAR during analysis.

Deletes any files extracted from the Wheel during analysis.