Returns the output format specified on the command line. Defaults to HTML if no format was specified. @return the output format name.

Returns the number of suppression rules currently loaded in the engine. @param engine a reference to the ODC engine @return the count of rules loaded

Retrieves the file command line parameter(s) specified for the 'scan' argument. @return the file paths specified on the command line for scan

Returns the node audit search utility. @return the node audit search utility

Returns the configured settings. @return the configured settings

Get the short description. @return the short description

@return the count of unused suppression rules.

Returns whether or not this suppression rule has CVSS v2 suppression criteria. @return whether or not this suppression rule has CVSS v2 suppression c

Returns whether or not this suppression rule has CVSS v3 suppression criteria. @return whether or not this suppression rule has CVSS v3 suppression c

Returns whether or not this suppression rule has CVSS v4 suppression criteria. @return whether or not this suppression rule has CVSS v4 suppression c

Determine if there is matching evidence. @param evidences the evidence to test @param criterion the criteria for a match @return true if the evidence

Calculates the checksum for the given file. @param file the source for the checksum @return the string representation of the checksum @throws IOExcep

HTML Encodes the provided text. @param text the text to encode @return the HTML encoded text

Initializes the masked keys collection. This is done outside of the {@link #initialize(java.lang.String)} method because a caller may use the {@link #

Returns a reference to the instance. @return a reference to the instance

Determine whether to enable this analyzer or not. @return whether the analyzer should be enabled

Get the value of enabled. @return the value of enabled

Compares two strings for equality; if both strings are null they are considered equal. @param left the first string to compare @param right the secon

Bundling Ruby gems that are identified from different .gemspec files but denote the same package path. This happens when Ruby bundler installs an appl

Bundling same swift dependencies with the same packagePath but identified by different file type analyzers. @param dependency1 dependency to test @pa

JSON Encodes the provided text. @param text the text to encode @return the JSON encoded text

Walk the current directory up to find `Directory.Build.props`. @param name the name of the build file to load. @param directory the directory to begi

Logs the properties. This will not log any properties that contain 'password' in the key. @param header the header to print with the log message @par

Builds a new option group so that an option can be specified multiple times on the command line. @param option the option to add to the group @return

@param project The target project to create a building request for. @param repos the artifact repositories to use. @return Returns a new ProjectBuildi

Produces an NVD search URL for a given CPE to find all applicable vulnerabilities, including only the part, vendor, and product of the given CPE (if p

Takes the properties supplied and updates the dependency-check settings. Additionally, this sets the system properties required to change the proxy UR

Process the input stream to create the list of dependencies.

Process the input stream to create the list of dependencies. @param inputStream the InputStream to parse @return the list of dependencies @throws Ana

Process the input stream to create the list of dependencies. @throws AnalysisException thrown when there is an error parsing the results of `mix_audi

Process the Maven properties file and interpolate all properties. @param properties new value of properties

Processes the advisories creating the appropriate dependency objects and adding the resulting vulnerabilities. @param advisories a collection of advi

Removes bad CPE matches for a dependency. Unfortunately, right now these are hard-coded patches for specific problems identified when testing this on

Removes any matching evidence from the dependency. @param dependency the dependency to update @param type the type of evidence to inspect and possibl

Removes a property from the local properties collection. This is mainly used in test cases. @param key the property key to remove

This method prevents to generate an infinite loop when variables are initialized by other variables and end up forming an unresolvable chain. <p>This

Common method to reset the searching analyzers. @throws IOException thrown if there is an index error

Scans the project's artifacts and adds them to the engine's dependency list. @param project the project to scan the dependencies of @param engine the

<p> Searches the Lucene CPE index to identify possible CPE entries associated with the supplied vendor, product, and version.</p> <p> If either the v

Method used by unit tests to setup the analyzer. @param searcher the Central Search object to use.

Set the value of confidence. @param confidence the value of confidence

Set the value of filePath. @param filePath new value of filePath

Sets the id. @param id the id

Set the value of Package URL. @param purl new value of package URL

Set the value of parentArtifactId. @param parentArtifactId new value of parentArtifactId

Set the value of parentGroupId. @param parentGroupId new value of parentGroupId

Set the value of parentVersion. @param parentVersion new value of parentVersion

Set the value of SHA1. @param sha1 new value of SHA1

Stores a timestamp in the properties file. @param properties the properties to store the timestamp @param key the property key @param timestamp the z

Sets the version. @param version the version

Generates a warning message listing a summary of dependencies and their associated CPE and CVE entries. @param dependencies a list of dependency obje

Starts the process in its own thread and collects the threads so `join` can be called later to ensure the thread finishes. @param p a reference to th

Converts the given text into bytes. @param text the text to convert @return the bytes

Strips leading non-numeric values from the start of the string. If no numbers are present this will return null. @param str the string to modify @ret

Submits the package.json file to the Node Audit API and returns a list of zero or more Advisories. @param packageJson the package.json file retrieved

Returns whether multiple instances of the same type of analyzer can run in parallel. Note that running analyzers of different types in parallel is not

Tests the CVE's CPE entries against the starts with filter. In general this limits the CVEs imported to just application level vulnerabilities. @para

Downloads the current RetireJS data source. @param engine a reference to the ODC Engine @return returns false as no updates are made to the database

URL Encodes the provided text. @param text the text to encode @return the URL encoded text

A flag indicating whether this represents a vulnerable software object. @param vulnerable whether or not this VulnerableSoftware object represents an

Checks if the deprecated (aka aliased) parameter is used in the plugin configuration and logs a warning if so. @param currentName the name of the cur

Returns a QuerySet from a Model, Manager, or QuerySet. Created to make get_object_or_404 and get_list_or_404 more DRY. Raises a ValueErr

Adds the advanced command line options to the given options collection. These are split out for purposes of being able to display two different help m

Adds a set of project references. @param includedBy a set of project references

Adds a version to the available version list. @param version the version to add to the list

Adds the constant data elements to the npm audit API payload. @param payloadBuilder a reference to the npm audit API payload builder

Adds the project name and version to the npm audit API payload. @param packageJson a reference to the package-lock.json @param payloadBuilder a refer

Checks if the current artifact is actually in the reactor projects that have not yet been built. If true a virtual dependency is created based on the

Adds a related dependency. @param dependency a reference to the related dependency

Adds the shutdown hook to the JVM.

Adds the standard command line options to the given options collection. @param options a collection of command line arguments

Adds summary information to the dependency @param dependency the dependency being analyzed @param pattern the pattern used to perform analysis @param

Adds a term, if one exists, from the tokens collection. @return whether or not a new term was added

Checks if the current artifact is actually in the reactor projects. If true a virtual dependency is created based on the evidence in the project. @pa

Loads a specified JAR file and collects information from the manifest and checksums to identify the correct CPE information. @param dependency the de

Reads in the pom file and adds elements as evidence to the given dependency. @param dependency the dependency being analyzed @param pomFile the pom f

This method constructs a Lucene query for a given field. The searchText is split into separate words and if the word is within the list of weighted wo