Get the value of productVersion. @return the value of productVersion

Get the value of removeVendor. @return the value of removeVendor

Get the value of removeVersion. @return the value of removeVersion

Get the value of type. @return the value of type

Returns <code>true</code> if the ecosystem cache is empty; otherwise <code>false</code>. @return <code>true</code> if the ecosystem cache is empty; o

Returns if the mojo should fail the build if an exception occurs. @return whether or not the mojo should fail the build

Determines if the connection string is for an H2 database. @return true if the connection string is for an H2 database

Determines if the given term is a Lucene keyword (e.g. AND, OR, NOT). @param term the term to test @return <code>true</code>if the term is a keyword;

Parses the given xml file and returns a Model object containing only the fields dependency-check requires. An attempt is made to remove any doctype de

Read n characters. @param n the number of characters to read @return the characters read @throws IOException thrown when an error occurs

Searches the index using the given search string. @param searchString the query text @param maxQueryResults the maximum number of documents to return

Set the value of description. @param description new value of description

Determines if a new version of the dependency-check engine has been released. @param lastChecked the epoch time of the last version check @param now

Adds the CVSS to the cvssBelow list. @param cvss the CVSS to add

Adds the specified evidence to the given evidence collection. @param dependency the dependency being analyzed @param type the type of evidence to add

Adds information to an evidence collection from the node json configuration. @param dep the dependency to add the evidence @param t the type of evide

Constructs a validating secure SAX XMLReader that can validate against schemas maintained locally. @param schemas One or more schemas with the schema

Properly cleans up resources allocated during analysis.

Download a resource from the given URL and have its content handled by the given ResponseHandler. @param url The url of the resource @par

Determines which path is shortest; if path lengths are equal then we use compareTo of the string method to determine if the first path is smaller. @p

Get the value of addVersion. @return the value of addVersion

Returns a list of all instances of the Analyzer interface. @return a list of Analyzers.

Gets the list of dependencies. @return the list of dependencies

Returns the (lowercase) file extension for a specified file. @param fileName the file name to retrieve the file extension from. @return the file exte

Returns the list of fileName evidence to match against. @return the list of fileName evidence to match against

Returns the hint rules. @return the hint rules

Get the host. @return the host

Obtains the printable/loggable value for a given key/value pair. This will mask some values so as to not leak sensitive information. @param key the p

Get the value of references. @return the value of references

Returns the SHA256 Checksum of the dependency. @return the SHA256 Checksum of the dependency

Generates a new temporary file name that is guaranteed to be unique. @param prefix the prefix for the file name to generate @param extension the exte

Returns the vendor duplicating hint rules. @return the vendor duplicating hint rules

Produces an NVD search URL for a given CPE to find all applicable vulnerabilities, including all populated parts of the given CPE. <p/> The opened lin

Sets the ecosystem cache and resets the changed map. @param cache the new CPE to ecosystem mapping

Set the value of description. @param description new value of description

Sets the package path on the given dependency. @param dep the dependency to update

Setter for updateToVersion - only used for testing. Represents the version retrieved from the database. @param version the version to test

The ending range, including the specified version, for matching vulnerable software. @param versionEndIncluding the version range @return a reference

The starting range, including the specified version, for matching vulnerable software. @param versionStartIncluding the version range @return a refer

Adds a description to the given dependency. If the description contains one of the following strings beyond 100 characters, then the description used

Appends the text to the supplied StringBuilder escaping Lucene control characters in the process. @param buf a StringBuilder to append the escaped te

Constructs a new document builder with security features enabled. @return a new document builder @throws javax.xml.parsers.ParserConfigurationExcepti

Test of determineCPE method, of class CPEAnalyzer. @param depName dependency name @param expResult expected results @param cpeAnalyzer the CPE analyz

Clears cache. Should be called whenever something is modified. While this is not the optimal cache eviction strategy, this is good enough for typical

create the parent folder if doesn't exist @param file the file @return true if all fine ?

Searches the data store of CPE entries, trying to identify the CPE for the given dependency based on the evidence contained within. The dependency pas

Extracts evidence from the contents and adds it to the given evidence collection. @param contents the text to extract evidence from @param blockVaria

Cycles through the cached web data sources and calls update on all of them. @throws UpdateException thrown if the operation fails @throws DatabaseExc

Executes batch inserts of vulnerabilities when property database.batchinsert.maxsize is reached. @param vulnId the vulnerability ID @param statement

Returns the ecosystem if identified by English description from the CVE data. @param cve the CVE data @return the ecosystem if identified

Get the value of fileDescription. @return the value of fileDescription

<p> Converts a byte array into a hex string.</p> <p> This method was copied from <a href="http://www.rgagnon.com/javadetails/java-0596.html">http://w

Gets the id. @return the id

Returns the argument value. @param argument the argument @return the value of the argument

Get the value of left. @return the value of left

Returns the list of licenses. @return the list of licenses

Returns the output from standard out from the process. @return the output from standard out from the process

Builds a prettier exception message. @param ex the SAXParseException @return an easier to read exception message

Loads all key/value pairs from PyPA metadata specifications¶. @param file The Wheel metadata of a Python package as a File @return The metad

Get the unmodifiable set of {@link #relatedDependencies}. This field is used to collect other dependencies which really represent the same dependency,

Get the value of right. @return the value of right

Gets a vulnerability for the provided CVE. @param cve the CVE to lookup @return a vulnerability object @throws DatabaseException if an exception occu

Verifies if the object exists in the object store. @param key the key to retrieve the object @return <code>true</code> if the object exists; otherwis

Returns null if the value starts with `${` and ends with `}`. @param value the value to check @return the correct value which may be null

Tests if the given text is url. @param text the string to test @return returns true if the text is a url, otherwise false

Tests if the byte passed in is a white space character. @param c the byte representing the character to test @return <code>true</code> if the byte is

Merges a new properties file into the current properties. This method allows for the loading of a user provided properties file.<br><br> <b>Note</b>:

Parses the given XML file and returns a list of the hints contained. @param file an XML file containing hints @throws HintParseException thrown if th

Parses the given xml file and returns a Model object containing only the fields dependency-check requires. No attempt is made to remove doctype defini

Updates the global Settings. @param cli a reference to the CLI Parser that contains the command line arguments used to set the corresponding settings

{@inheritDoc}

Sets a parameter value on a prepared statement with null checks. @param ps the prepared statement @param i the parameter index @param value the value

Sets evidence from the pom on the supplied dependency. @param dependency the dependency to set data on @param pom the information from the pom @param

Set the value of URL. @param url the value of URL

Determines if the path contains "/node_modules/" or "/bower_components/" (i.e. it is a child module). This analyzer does not scan child modules. @par

should process the dependency ? Will return true if you need to skip it . (e.g. dependency can't be read, or if npm audit doesn't handle it) @param n

The ending range, excluding the specified version, for matching vulnerable software. @param versionEndExcluding the version range @return a reference

Determines if the epoch date is within the range specified of the compareTo epoch time. This takes the (compareTo-date)/1000/60/60/24 to get the numbe

Add a collection of project reference. @param projectReferences a set of project references

Adds a CWE to the set. @param cwe new CWE to add

Adds a reference to the references collection. @param ref a reference for the vulnerability

Executes the test call against AnalyzeDependency. @param vendor @param product @param version @param expectedCpe @param cpeAnalyzer @param engine @th

Standard implementation of compareTo that compares identifier confidence, evidence confidence, and then the identifier. @param o the IdentifierMatch

Utility function to create a regex pattern matcher. @param name the value to use when constructing the assignment pattern @return the compiled Patter

Sets the {@link Thread#getContextClassLoader() Thread Context Class Loader} to the one for this class, and then calls {@link #executeWithContextClassl