yavdb 0.4.0 → 0.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: ca645bf2ce6d083015c0c97363f5f46aab4e27cf
4
- data.tar.gz: 1cff5ebc4091c93e0ed8d57c4b692ca3c7861b85
3
+ metadata.gz: 1be5fc747b3ec539e16cdb7d4ba3d83da0373cc5
4
+ data.tar.gz: c8895b7259b34b931f0df57f32cb045d45d9eb8e
5
5
  SHA512:
6
- metadata.gz: a00a4a250b92d3d3cb2549a906124470002e62ddf4cde55f51e2d002ab97c6509d7d8ba52ada201d70ff4932a948e57262e36ca4c6749809911fc2671bb150b3
7
- data.tar.gz: a4484eec314817c4344b6f3dd793369d37cffe297c98aeda0eb3b11e883d32a71e9f761df0e669cb1be4bc516b2816f8c3ee4e01c9b85522a394b30058547873
6
+ metadata.gz: 4e2b14ec2b6de43c1a41bc0cb71133a0c83f9caad00a3ff19b6193deb0ead7d971425f6b3ef6f4b2bb9fc304bc24e9f480d5cca88a9bec4836e337465fa94d07
7
+ data.tar.gz: 2813a004bb9fb2735e834e879ad842502eb22d4e9d70f0466f20408d51128dd7dd3dd0d02504e74730b0f07b02a755ccdf3aff3e01745d771042f528d18987da
data/.circleci/config.yml CHANGED
@@ -12,17 +12,21 @@ jobs:
12
12
  type: shell
13
13
  command: gem install bundler -v 1.16
14
14
 
15
+ - name: Prepare yavdb cache
16
+ type: shell
17
+ command: echo "$(date)" > /tmp/yavdb.cache.log
18
+
15
19
  - name: Restore gem cache
16
20
  type: cache-restore
17
21
  keys:
18
22
  - gem-yavdb-{{ checksum "Gemfile.lock" }}
19
- - gem-yavdb
23
+ - gem-yavdb-
20
24
 
21
25
  - name: Restore yavdb cache
22
26
  type: cache-restore
23
27
  keys:
24
28
  - crawler-yavdb-cache-1
25
- - crawler-yavdb-cache
29
+ - crawler-yavdb-cache-
26
30
 
27
31
  - name: Bundle Install
28
32
  type: shell
@@ -44,7 +48,7 @@ jobs:
44
48
 
45
49
  - name: Save yavdb cache
46
50
  type: cache-save
47
- key: crawler-yavdb-cache-1
51
+ key: crawler-yavdb-cache-{{ checksum "/tmp/yavdb.cache.log" }}
48
52
  paths:
49
53
  - ~/.yavdb/cache
50
54
 
data/Gemfile.lock CHANGED
@@ -1,7 +1,7 @@
1
1
  PATH
2
2
  remote: .
3
3
  specs:
4
- yavdb (0.4.0)
4
+ yavdb (0.4.1)
5
5
  json (~> 2.1)
6
6
  kramdown (~> 1.17)
7
7
  oga (~> 2.15)
@@ -30,5 +30,7 @@ module YAVDB
30
30
 
31
31
  POSSIBLE_PACKAGE_MANAGERS = ['npm', 'rubygems', 'maven', 'nuget', 'packagist', 'pypi', 'go'].freeze
32
32
 
33
+ SEVERITIES = ['low', 'medium', 'high'].freeze
34
+
33
35
  end
34
36
  end
@@ -33,12 +33,12 @@ module YAVDB
33
33
  PACKAGE_MANAGER = 'packagist'.freeze
34
34
 
35
35
  def self.advisories
36
- REPOSITORY_URLS.map do |url|
37
- YAVDB::SourceTypes::GitRepo.search('*/*/*.yaml', url).map do |repo_path, file_paths|
36
+ REPOSITORY_URLS.map do |repository_url|
37
+ YAVDB::SourceTypes::GitRepo.search('*/*/*.yaml', repository_url).map do |repo_path, file_paths|
38
38
  Dir.chdir(repo_path) do
39
39
  file_paths.map do |file_path|
40
40
  advisory_hash = YAML.load_file(file_path)
41
- url = "#{url}/blob/master/#{file_path}"
41
+ url = "#{repository_url}/blob/master/#{file_path}"
42
42
  create(url, advisory_hash)
43
43
  end
44
44
  end
@@ -84,7 +84,7 @@ module YAVDB
84
84
  end
85
85
 
86
86
  def clean_version(versions)
87
- versions&.map { |version| version.gsub(',', ' ') }
87
+ versions&.map { |version| version.tr(',', ' ') }
88
88
  end
89
89
 
90
90
  def references(advisory_hash)
@@ -105,7 +105,7 @@ module YAVDB
105
105
  elsif ['maven', 'nuget', 'pypi'].include?(package_manager)
106
106
  [vulnerable_versions]
107
107
  else
108
- [vulnerable_versions.gsub(',', ' ')]
108
+ [vulnerable_versions.tr(',', ' ')]
109
109
  end
110
110
 
111
111
  sidebar_data = parse_side_bar(advisory_page)
@@ -69,7 +69,7 @@ module YAVDB
69
69
  def split_versions(version)
70
70
  version
71
71
  .strip
72
- .split(/,|\|\|/)
72
+ .split(%r{,|\|\|})
73
73
  end
74
74
 
75
75
  end
data/lib/yavdb/version.rb CHANGED
@@ -16,6 +16,6 @@
16
16
 
17
17
  module YAVDB
18
18
 
19
- VERSION = '0.4.0'
19
+ VERSION = '0.4.1'
20
20
 
21
21
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: yavdb
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.4.0
4
+ version: 0.4.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rodrigo Fernandes
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-10-21 00:00:00.000000000 Z
11
+ date: 2018-10-28 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: bundler