Compares two vulnerabilities.<br> Natural order of vulnerabilities is defined as decreasing in severity and alphabetically by name for equal severity.

Determines the severity from the score. @param score the score @return the severity

Returns the ecosystem for the given CPE (vendor, product). If the CPE has a different ecosystem previously identified the ecosystem will be updated to

Get the value of exceptions. @return the value of exceptions

Determines if the cpeEntry specified as a PropertyType matches the given Identifier. @param suppressionEntry a suppression rule entry @param identifi

Get the value of fatal. @return the value of fatal

Determines if the jar is shaded and the created pom.xml identified the same CPE as the jar - if so, the pom.xml dependency should be removed. @param

Saves the key value pair to the properties store. @param key the property key @param value the property value

Set the value of name. @param name new value of name

Adds an exception to the collection. @param ex the exception to add

Adds a vulnerability to the dependency. @param vulnerability a vulnerability

Builds the CPE Object. @return the CPE Object @throws CpeValidationException thrown if one of the CPE components is invalid

<p> Returns the text created by concatenating the text and the values from the EvidenceCollection (filtered for a specific confidence). This attempts

Retrieves a file from a given URL and saves it to the outputPath. @param url the URL of the file to download @param outputPath the path to the

<p> Creates the cryptographic checksum of a given file using the specified algorithm.</p> @param algorithm the algorithm to use to calculate the chec

Get the value of description. @return the value of description

Get the value of fileVersion. @return the value of fileVersion

Process the Artifactory response. @param response the HTTP response @return a list of the Maven Artifact information that matches the searched depend

Determines if the 'version' command line argument was passed in. @return whether or not the 'version' command line argument was passed in

Determines if a JS file is from a webjar dependency. @param dependency the first dependency to compare @param nextDependency the second dependency to

<p> Determines if the VulnerableSoftware matches the given target VulnerableSoftware. This does not follow the CPE 2.3 Specification exactly as there

Adds the relatedDependency to the dependency's related dependencies. @param dependency the main dependency @param relatedDependency a collection of d

Parses the given XML file and returns a list of the suppression rules contained. @param file an XML file containing suppression rules @return a list

Set the value of ecosystem. @param ecosystem new value of ecosystem

Sets the severity a {@link Source} has assigned for which a CVSS score is not available. Severity could be anything ranging from 'critical', 'high', '

Writes the report to the given output directory. @param applicationName the name of the application/project @param outputDir the path to the output d

Adds an entry to the specified collection and sets the Integer (e.g. the count) to 1. If the entry already exists in the collection then the Integer i

Closes the MemoryIndex.

Generated equals method to perform equality check. @param obj the object to check @return true if the objects are equal; otherwise false

Retrieves a file from a given URL and returns the contents. @param url the URL of the file to download @param charset The characterset to use to

Gets the artifactUrl. @return the artifactUrl

Returns a reference to the database. @return a reference to the database

Get the value of databaseProperties. @return the value of databaseProperties

Get the value of givenVersion. @return the value of givenVersion

Get the value of license. @return the value of license

Returns the package path. @return the package path

Gets the {@link java.io.InputStream} for this resource. @param resource path @return the input stream for the given resource @throws FileNotFoundExce

Returns the configured settings. @return the configured settings

Retrieves a zoned date time. @param key the property key @return the zoned date time

Determines whether or not batch insert is enabled. @return <code>true</code> if batch insert is enabled; otherwise <code>false</code>

Determines if the 'help' command line argument was passed in. @return whether or not the 'help' command line argument was passed in

@param now The current time in any timezone @param targetYear Target year's feed data to retrieve @return Whether or not the targetYear is cons

Uses the object's properties to determine if the supplied string matches the value of this property. @param text the String to validate @return wheth

Creates and loads data into an in memory index. @param data the CPE data @param settings a reference to the dependency-check settings @throws IndexEx

{@inheritDoc}

Reads in the specified POM and converts it to a Model. @param file the pom.xml file @return returns an object representation of the POM @throws Analy

Sets a property value only if the array value is not null and not empty. @param key the key for the property @param value the value for the property

Sets the CVSS V3 scoring information. @param cvssV3 the CVSS V3 scoring information

Adds the Maven artifact as evidence. @param source The source of the evidence @param mavenArtifact The Maven artifact @param confidence The confidenc

Adds the CPE to the CPE list. @param cpe the CPE to add

Adds the parent or root of the transitive dependency chain (i.e., this was included by the parent dependency X). @param includedBy a project referenc

Cleans up resources to prevent memory leaks.

Close the given {@link java.io.Closeable} instance, ignoring nulls, and logging any thrown {@link java.io.IOException}. @param closeable to be closed

Performs the same operation as Cpe.compareAttributes() - except additional rules are applied to match a1 to alpha1 and the comparison of update attrib

Configure pre-emptive credentials for the host/port of the URL when configured in settings for the default credential-store and authentication-cache.

Compares the equality of this object to the one passed in as a parameter. @param obj the object to compare equality @return returns true only if the

Get the value of addProduct. @return the value of addProduct

Get the value of addVendor. @return the value of addVendor

Returns a list with the given key. <p> If the property is not set then {@code null} will be returned. @param key the key to get from this {@link org.

@return the ecosystem

Get the value of givenProduct. @return the value of givenProduct

Get the value of givenVendor. @return the value of givenVendor

Gets the singleton instance of the CpeMemoryIndex. @return the instance of the CpeMemoryIndex

Get the value of namespaces. @return the value of namespaces

Get the value of notes from suppression notes. @return the value of notes

Get the value of removeProduct. @return the value of removeProduct

Get an unmodifiable set of suppressedVulnerabilities. @return the unmodifiable sorted set of suppressedVulnerabilities

Gets the version. @return the version

Get the value of base. @return the value of base

Parses the JSON response from the NPM Audit API. @param jsonResponse the JSON node to parse @return an AdvisoryResults object @throws org.json.JSONEx

Sets the actual file path of the dependency on disk. @param actualFilePath the file path of the dependency

Sets a parameter value on a prepared statement with null checks. @param ps the prepared statement @param i the parameter index @param value the value

Sets the source that identified the vulnerability. @param source the source

Default implementation of toString(). @return the string representation of the object

Cycles through the collection of class name information to see if parts of the package names are contained in the provided value. If found, it will be

Adds a name space. @param namespace the namespace to add

Adds a project reference. @param projectReference a project reference

Adds the vulnerableSoftware to the collection. @param vulnerableSoftware a collection of vulnerable software

De-registers the driver. @param driver the driver to de-register

Configure the credentials in the settings for a certain connection.<br/> <p> When a serverId is given, then its values are used instead of the less se

@param url A NVD data feed URL which may be just a base URL such as https://my-nvd-cache/nvd_cache or may include a formatted URL ending wi

Returns the phase that the analyzer is intended to run in. @return the phase that the analyzer is intended to run in.

Returns the value of coord. @return the value of coord

Get the value of description. @return the value of description

Get the value of name. @return the value of name

Get the value of parentVersion. @return the value of parentVersion