retire 4.3.0 → 4.3.1

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## [4.3.1]
+
+### Bugfix
+
+- Should always include detected libraries in SBOM reports regardless of if they are vulnerable or not
+
 ## [4.3.0]
 
 ### Changes

package/lib/retire.js

@@ -4,7 +4,7 @@
  */
 
 var exports = exports || {};
-exports.version = '4.3.0';
+exports.version = '4.3.1';
 
 function isDefined(o) {
   return typeof o !== 'undefined';

package/lib/scanner.js

@@ -68,8 +68,6 @@ function filterAndEmitResults(finding, options) {
     finding.results.forEach((r) => (r.vulnerabilities = uniqueVulnerabilities(r.vulnerabilities)));
     if (options.ignore)
         removeIgnored(finding.results, options.ignore);
-    if (!options.verbose)
-        finding.results = finding.results.filter((f) => retire.isVulnerable([f]));
     if (finding.results.length == 0)
         return;
     if (retire.isVulnerable(finding.results)) {

package/package.json

@@ -2,7 +2,7 @@
   "author": "Erlend Oftedal <erlend@oftedal.no>",
   "name": "retire",
   "description": "Retire is a tool for detecting use of vulnerable libraries",
-  "version": "4.3.0",
+  "version": "4.3.1",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",