Compute a best-effort score for the severity of a vulnerability for the purpose of sorting. <br> Note that CVSSv2 and CVSSv3 scores are essentially un

Recursively builds the dependency structure - copying only the needed items from the package-lock.json into the npm audit API payload. @param dep the

Constructs a secure non-validating SAX Parser. @return a SAX Parser @throws javax.xml.parsers.ParserConfigurationException is thrown if there is a pa

Constructs the URL using the SHA1 checksum. @param sha1sum the SHA1 checksum @return the API URL to search for the given checksum @throws MalformedUR

Calculates the checksums for the given file. @param file the file used to calculate the checksums

Executes the test call against AnalyzeDependency. @param vendor @param product @param version @param engine @throws Exception

check unused suppression RULES. @param engine a reference to the ODC engine

Only returns alpha numeric characters contained in a given package name. @param name the package name to cleanse @return the cleansed package name

Clears the {@link #relatedDependencies}.

Closes the result set capturing and ignoring any SQLExceptions that occur. @param rs a ResultSet to close

Cycles through an enumeration of JarEntries, contained within the dependency, and returns a list of the class names. This does not include core Java p

Collects the meta data from an archive. @param dependency the archive being scanned @param folderFilter the filter to apply to the folder @param meta

Gathers evidence from the METADATA file. @param dependency the dependency being analyzed @param file a reference to the manifest/properties file

Checks if the given file path is contained within a war or ear file. @param filePath the file path to check @return true if the path contains '.war\'

Counts the number of times the character is present in the string. @param string the string to count the characters in @param c the character to coun

Builds a dependency object based on the given data. @param parentDependency a reference to the parent dependency @param name the name of the dependen

Creates a dependency object. @param parent the parent dependency @param source the source type @param name the name of the dependency @param version

Construct a dependency object. @param dependency the parent dependency @param name the name of the dependency to create @param version the version of

Creates an Analyzer for searching the CPE Index. @return the CPE Analyzer.

Creates a unique temporary directory in the given directory. @param base the base directory to create a temporary directory within @return the tempor

Decompresses a file. @param inputStream the compressed file @param outputFile the location to write the decompressed file @throws ArchiveExtractionEx

Retrieves a list of CPE values from the CveDB based on the vendor and product passed in. The list is then validated to find only CPEs that are valid f

{@inheritDoc}

Escapes the text passed in so that it is treated as data instead of control characters. @param text data to be escaped @return the escaped text.

Executes executes the analyzer using multiple threads. @param exceptions a collection of exceptions that occurred during analysis @param analyzer the

Extracts a file from an archive. @param input the archives input stream @param file the file to extract @throws AnalysisException thrown if there is

Extracts the contents of an archive into the specified directory. @param archive an archive file such as a WAR or EAR @param destination a directory

Utility method for a work-around to MSHARED-998 @param allDeps The List of ArtifactResults for all dependencies @param unresolvedArtifact The Artifac

Scan the given file/folder, and return any new dependencies found. @param engine used to scan @param file target of scanning @return any dependencies

Collects evidence from the home page URL. @param dependency the dependency that is being analyzed @param type the type of evidence @param pattern the

Returns the analysis tasks for the dependencies. @param analyzer the analyzer to create tasks for @param exceptions the collection of exceptions to c

<p> Returns the setting key to determine if the analyzer is enabled.</p> @return the key for the analyzer's enabled property

Returns artifacts. @return artifacts

Gets the authors. @return the authors

Attempts to trim a maven repo to a common base path. This is typically [drive]\[repo_location]\repository\[path1]\[path2]. @param path the path to tr

Returns the data cache for Central search. @return a references to the data cache for Central search

Returns a connection string from the configured properties. If the connection string contains a %s, this method will determine the 'data' directory an

Get the value of connectionString. @return the value of connectionString

Get the value of CPE. @return the value of CPE

Retrieves the current released version number from the github documentation site. @return the current released version number

Returns the HashMap of CWE entries (CWE-ID, Full CWE Name). @return a HashMap of CWE entries &lt;String, String&gt;

Returns an Iterator for all instances of the CachedWebDataSource interface. @return an iterator of CachedWebDataSource.

Returns a set containing all the descendant projects of the given project. @param project the project for which all descendants will be returned @ret

Gets the description of the Dependency-Check report to be displayed in the Maven Generated Reports page. @param locale The Locale to get the descript

Retrieves a document from the Index. @param documentId the id of the document to retrieve @return the Document @throws IOException thrown if there is

Get the value of documentId. @return the value of documentId

Get the value of duplicate. @return the value of duplicate

Analyzes the description and associated URLs to determine if the vulnerability/software is for a specific known ecosystem. The ecosystem can be used l

Get the value of evidenceConfidence @return the value of evidenceConfidence

Returns the list of excluded artifacts based on either artifact id or group id and artifact id. @return a list of artifact to exclude

Returns the executor service for a given analyzer. @param analyzer the analyzer to obtain an executor @return the executor service

Get the value of filePath. @return the value of filePath

Combines the format and formats properties into a single collection. @return the selected report formats

Returns a map of CWE-ID and title. @return a map of CWE-ID and title.

<p> Returns the full CWE name from the CWE ID.</p> @param cweId the CWE ID @return the full name of the CWE

Attempts to determine the path to `go`. @return the path to `go`

Used in testing only - this simply returns the path to the extracted GrokAssembly.dll. @return the path to the extracted GrokAssembly.dll

Returns a reference to the H2 database file. @param configuration the configured settings @return the path to the H2 database file @throws IOExceptio

Returns the list of hint rules. @return the value of hintRules

Returns the vulnerability id. @return the vulnerability id

Get the value of confidence. @return the value of confidence

Returns the position of the last file separator. @param file a file path @return the position of the last file separator

Get the value of legalCopyright. @return the value of legalCopyright

Get the value of legalTrademarks. @return the value of legalTrademarks

Determines which of the android dependencies should be considered the primary. @param dependency1 the first android dependency to compare @param depe

Returns a list of files that match the given filter, this does not recursively scan the directory. @param folder the folder to filter @param filter t

Returns the maven proxy. @param protocol The protocol of the target URL. @return the maven proxy configured for that protocol

Returns a map of the meta data from the database properties. This primarily contains timestamps of when the NVD CVE information was last updated. @re

Returns the model obtained from the pom.xml. @return the model object

Retrieves the next temporary directory to extract an archive too. @return a directory @throws AnalysisException thrown if unable to create temporary

Returns the open SSL version as a string. @param openSSLVersionConstant The open SSL version @return the version of openssl

Attempts to determine the path to `pnpm`. @return the path to `pnpm`