owasp-depscan 5.2.11__tar.gz → 5.2.13__tar.gz

{owasp-depscan-5.2.11/owasp_depscan.egg-info → owasp-depscan-5.2.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: owasp-depscan
-Version: 5.2.11
+Version: 5.2.13
 Summary: Fully open-source security audit for project dependencies based on known vulnerabilities and advisories.
 Author-email: Team AppThreat <cloud@appthreat.com>
 License: MIT
@@ -22,7 +22,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: appthreat-vulnerability-db==5.6.4
 Requires-Dist: defusedxml
-Requires-Dist: oras==0.1.26
+Requires-Dist: oras~=0.1.26
 Requires-Dist: PyYAML
 Requires-Dist: rich
 Requires-Dist: quart

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13}/depscan/lib/analysis.py

@@ -1495,7 +1495,7 @@ def find_purl_usages(bom_file, src_dir, reachables_slices_file):
             data = json.load(f)
 
         for c in data["components"]:
-            purl = c["purl"]
+            purl = c.get("purl", "")
             if c.get("evidence") and c["evidence"].get("occurrences"):
                 direct_purls[purl] += len(c["evidence"].get("occurrences"))
     return dict(direct_purls), dict(reached_purls)

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13}/depscan/lib/audit.py

@@ -4,13 +4,17 @@ from depscan.lib import config
 from depscan.lib.pkg_query import npm_metadata, pypi_metadata
 
 # Dict mapping project type to the audit source
-type_audit_map = {"nodejs": NpmSource(), "js": NpmSource(), "npm": NpmSource()}
+type_audit_map = {"nodejs": NpmSource(), "js": NpmSource(), "javascript": NpmSource(), "ts": NpmSource(),
+                  "typescript": NpmSource(), "npm": NpmSource()}
 
 # Dict mapping project type to risk audit
 risk_audit_map = {
     "npm": npm_metadata,
     "nodejs": npm_metadata,
     "js": npm_metadata,
+    "javascript": npm_metadata,
+    "ts": npm_metadata,
+    "typescript": npm_metadata,
     "python": pypi_metadata,
     "py": pypi_metadata,
     "pypi": pypi_metadata,

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13}/depscan/lib/normalize.py

@@ -219,7 +219,7 @@ def create_pkg_variations(pkg_dict):
                     {
                         "vendor": vvar,
                         "name": nvar,
-                        "version": pkg_dict["version"],
+                        "version": pkg_dict.get("version", ""),
                     }
                 )
     elif len(name_aliases) > 1:
@@ -229,7 +229,7 @@ def create_pkg_variations(pkg_dict):
                 {
                     "vendor": pkg_dict.get("vendor"),
                     "name": nvar,
-                    "version": pkg_dict["version"],
+                    "version": pkg_dict.get("version", ""),
                 }
             )
     return pkg_list

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13}/depscan/lib/orasclient.py

@@ -22,7 +22,7 @@ class VdbDistributionRegistry(oras.provider.Registry):
     jsonschema.exceptions.ValidationError: Additional properties are not allowed ('artifactType' was unexpected)
     """
 
-    def get_manifest(self, container, allowed_media_type=None):
+    def get_manifest(self, container, allowed_media_type=None, refresh_headers=True):
         """
         Retrieve a manifest for a package.
 

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13/owasp_depscan.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: owasp-depscan
-Version: 5.2.11
+Version: 5.2.13
 Summary: Fully open-source security audit for project dependencies based on known vulnerabilities and advisories.
 Author-email: Team AppThreat <cloud@appthreat.com>
 License: MIT
@@ -22,7 +22,7 @@ Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: appthreat-vulnerability-db==5.6.4
 Requires-Dist: defusedxml
-Requires-Dist: oras==0.1.26
+Requires-Dist: oras~=0.1.26
 Requires-Dist: PyYAML
 Requires-Dist: rich
 Requires-Dist: quart

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13}/owasp_depscan.egg-info/requires.txt

@@ -1,6 +1,6 @@
 appthreat-vulnerability-db==5.6.4
 defusedxml
-oras==0.1.26
+oras~=0.1.26
 PyYAML
 rich
 quart

{owasp-depscan-5.2.11 → owasp-depscan-5.2.13}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "owasp-depscan"
-version = "5.2.11"
+version = "5.2.13"
 description = "Fully open-source security audit for project dependencies based on known vulnerabilities and advisories."
 authors = [
     {name = "Team AppThreat", email = "cloud@appthreat.com"},
@@ -8,7 +8,7 @@ authors = [
 dependencies = [
     "appthreat-vulnerability-db==5.6.4",
     "defusedxml",
-    "oras==0.1.26",
+    "oras~=0.1.26",
     "PyYAML",
     "rich",
     "quart",