owasp-depscan 5.3.3__tar.gz → 5.3.5__tar.gz

{owasp_depscan-5.3.3/owasp_depscan.egg-info → owasp_depscan-5.3.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: owasp-depscan
-Version: 5.3.3
+Version: 5.3.5
 Summary: Fully open-source security audit for project dependencies based on known vulnerabilities and advisories.
 Author-email: Team AppThreat <cloud@appthreat.com>
 License: MIT
@@ -20,7 +20,7 @@ Classifier: Topic :: Utilities
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: appthreat-vulnerability-db==5.6.7
+Requires-Dist: appthreat-vulnerability-db==5.6.8
 Requires-Dist: defusedxml
 Requires-Dist: oras~=0.1.26
 Requires-Dist: PyYAML

{owasp_depscan-5.3.3 → owasp_depscan-5.3.5}/depscan/lib/config.py

@@ -156,7 +156,9 @@ package_alias = {
     "Microsoft.IdentityModel.Clients.ActiveDirectory": "active_directory_authentication_library",
     "starkbank_ecdsa": "ecdsa-elixir",
     "php-pear": "pear-core-minimal",
-    "Selenium.WebDriver": "selenium"
+    "Selenium.WebDriver": "selenium",
+    "selenium": "selenium",
+    "numpy": "numpy"
 }
 
 # Default ignore list

{owasp_depscan-5.3.3 → owasp_depscan-5.3.5}/depscan/lib/normalize.py

@@ -207,12 +207,12 @@ def create_pkg_variations(pkg_dict):
         if "-bin" not in name:
             name_aliases.add(name + "-bin")
     else:
-        # Filter vendor aliases that are also name aliases for non pypi packages
+        # Filter vendor aliases that are also name aliases
         # This is needed for numpy which has the vendor name numpy
         # Also needed for nuget. Eg: selenium:selenium
-        if not purl.startswith("pkg:pypi") and not purl.startswith("pkg:nuget"):
+        if not purl.startswith("pkg:nuget"):
             vendor_aliases = [
-                x for x in vendor_aliases if x not in name_aliases or x == vendor
+                x for x in vendor_aliases if x not in name_aliases or x == vendor or config.package_alias.get(x) is not None
             ]
     if len(vendor_aliases) > 1:
         for vvar in list(vendor_aliases):

{owasp_depscan-5.3.3 → owasp_depscan-5.3.5/owasp_depscan.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: owasp-depscan
-Version: 5.3.3
+Version: 5.3.5
 Summary: Fully open-source security audit for project dependencies based on known vulnerabilities and advisories.
 Author-email: Team AppThreat <cloud@appthreat.com>
 License: MIT
@@ -20,7 +20,7 @@ Classifier: Topic :: Utilities
 Requires-Python: >=3.8
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: appthreat-vulnerability-db==5.6.7
+Requires-Dist: appthreat-vulnerability-db==5.6.8
 Requires-Dist: defusedxml
 Requires-Dist: oras~=0.1.26
 Requires-Dist: PyYAML

{owasp_depscan-5.3.3 → owasp_depscan-5.3.5}/owasp_depscan.egg-info/requires.txt

@@ -1,4 +1,4 @@
-appthreat-vulnerability-db==5.6.7
+appthreat-vulnerability-db==5.6.8
 defusedxml
 oras~=0.1.26
 PyYAML

{owasp_depscan-5.3.3 → owasp_depscan-5.3.5}/pyproject.toml

@@ -1,12 +1,12 @@
 [project]
 name = "owasp-depscan"
-version = "5.3.3"
+version = "5.3.5"
 description = "Fully open-source security audit for project dependencies based on known vulnerabilities and advisories."
 authors = [
     {name = "Team AppThreat", email = "cloud@appthreat.com"},
 ]
 dependencies = [
-    "appthreat-vulnerability-db==5.6.7",
+    "appthreat-vulnerability-db==5.6.8",
     "defusedxml",
     "oras~=0.1.26",
     "PyYAML",