owasp-depscan 5.4.4__py3-none-any.whl → 5.4.5__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of owasp-depscan might be problematic. Click here for more details.

Files changed (8) hide show
  1. depscan/lib/analysis.py +1 -1
  2. depscan/lib/normalize.py +2 -1
  3. {owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/METADATA +1 -1
  4. {owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/RECORD +8 -8
  5. {owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/LICENSE +0 -0
  6. {owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/WHEEL +0 -0
  7. {owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/entry_points.txt +0 -0
  8. {owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/top_level.txt +0 -0
depscan/lib/analysis.py CHANGED
@@ -601,7 +601,7 @@ def prepare_vdr(options: PrepareVdrOptions):
601
601
  has_poc_count += 1
602
602
  if pkg_severity in ("CRITICAL", "HIGH"):
603
603
  pkg_requires_attn = True
604
- if clinks.get("vendor") and package_type not in config.OS_PKG_TYPES:
604
+ if (clinks.get("vendor") and package_type not in config.OS_PKG_TYPES) or reached_purls.get(purl):
605
605
  if reached_purls.get(purl):
606
606
  # If it has a poc, an insight might have gotten added above
607
607
  if not pkg_requires_attn:
depscan/lib/normalize.py CHANGED
@@ -149,7 +149,8 @@ def create_pkg_variations(pkg_dict):
149
149
  # Issue #262
150
150
  # Eg: cpe:2.3:a:microsoft:azure_storage_blobs:*:*:*:*:*:python:*:*
151
151
  # pypi name is pkg:pypi/azure-storage-blob@12.8.0
152
- if not name.endswith("s"):
152
+ # Issue #341 - do not change colorama to coloramas
153
+ if not name.endswith("s") and "-" in name:
153
154
  name_aliases.add(name.replace("-", "_") + "s")
154
155
  vendor_aliases.add("pip")
155
156
  vendor_aliases.add("pypi")
{owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/METADATA RENAMED
@@ -1,6 +1,6 @@
1
1
  Metadata-Version: 2.1
2
2
  Name: owasp-depscan
3
- Version: 5.4.4
3
+ Version: 5.4.5
4
4
  Summary: Fully open-source security audit for project dependencies based on known vulnerabilities and advisories.
5
5
  Author-email: Team AppThreat <cloud@appthreat.com>
6
6
  License: MIT
{owasp_depscan-5.4.4.dist-info → owasp_depscan-5.4.5.dist-info}/RECORD RENAMED
@@ -1,7 +1,7 @@
1
1
  depscan/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
2
2
  depscan/cli.py,sha256=WQ_EbQgkwW0h1L-7otvaG8mLFqpk4r8n8YCPjHcCE1M,39240
3
3
  depscan/lib/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
4
- depscan/lib/analysis.py,sha256=9JlHysUoE6NwbgluWJuByLH_3RHapwLOUSIEP8YV7wA,60444
4
+ depscan/lib/analysis.py,sha256=M3xvQbsN3-__3OXCsLD2MJYOcpVzUKyjmWoO6xL1T8I,60473
5
5
  depscan/lib/audit.py,sha256=wpmIowFLaoFs0agZN3FUFxPumty5Gr6YRfcjXGsuNcI,1497
6
6
  depscan/lib/bom.py,sha256=MuHBCAt0tQ7LKwuDyMlxi0yCrMA6jI7tV81bFslU3S4,16822
7
7
  depscan/lib/config.py,sha256=5kAUh3BfH6Ngu0NY4CDVeNq0Rykk9yWaOh2sd3JWu9c,14627
@@ -10,7 +10,7 @@ depscan/lib/explainer.py,sha256=gSBNMxwyr1s_2v0GY-k3Ds5B92LMeCrqJF5P9nsW934,9966
10
10
  depscan/lib/github.py,sha256=h6e_12xLwspXJbt_7lW6vuHaqgJQgyFSRCLrfUndCH4,1697
11
11
  depscan/lib/license.py,sha256=y4-WZuD2MOunKaLd2EJGcSYP6s3Lp_dgssdzhcl9eEM,2332
12
12
  depscan/lib/logger.py,sha256=TZkxVN2a5g2g0nOlrIodJWaDhTFT6JLtR1vR4fPSMgs,1605
13
- depscan/lib/normalize.py,sha256=IRf_GjefuLrdR1sl5qvfNRnCS5yC4Yfs7Q76vpIdJnQ,12756
13
+ depscan/lib/normalize.py,sha256=2RbcubnpWu6bC_HpynuRs4MPRVOv8Ig9L3HOPXmJTMo,12835
14
14
  depscan/lib/orasclient.py,sha256=l8Diieh0I2thTova4ozUkMblgyhRsttAkarnkRemsn0,4960
15
15
  depscan/lib/pkg_query.py,sha256=hOZGtWR4xXaGjoy2x8nzp3chSqywroAT6kNE8iI9Y1s,21494
16
16
  depscan/lib/utils.py,sha256=KUQPzjeQYIcjobDakCcbul93Sx74WEqTa_cINmy5620,14844
@@ -66,9 +66,9 @@ vendor/choosealicense.com/_licenses/vim.txt,sha256=d5GQjXB328L8EBkhKgxcjk344D3K7
66
66
  vendor/choosealicense.com/_licenses/wtfpl.txt,sha256=BxXeubkvQm32MDmlZsBcbzJzBpR5kWgw0JxSR9d7f3k,948
67
67
  vendor/choosealicense.com/_licenses/zlib.txt,sha256=e6dfCeLhxD3NCnIkY4cVIagRaWdRvencjNhHZ1APvpc,1678
68
68
  vendor/spdx/json/licenses.json,sha256=JFXWP7m8we70m62f5b144908LnHDGZn0A_5zjNxnyuI,300252
69
- owasp_depscan-5.4.4.dist-info/LICENSE,sha256=oQnCbnZtJ_NLDdOLc-rVY1D1N0RNWLHPpYXcc77xzSo,1073
70
- owasp_depscan-5.4.4.dist-info/METADATA,sha256=XrYOgUFsAHR-9mj0mnRh_NZ5IacX5QuWOZtg5TISVuU,27338
71
- owasp_depscan-5.4.4.dist-info/WHEEL,sha256=cVxcB9AmuTcXqmwrtPhNK88dr7IR_b6qagTj0UvIEbY,91
72
- owasp_depscan-5.4.4.dist-info/entry_points.txt,sha256=FxQKHFWZTfKU2eBxHPFRxwhSNexntYygYhquykS8zxA,69
73
- owasp_depscan-5.4.4.dist-info/top_level.txt,sha256=qbHOZvNU2dXANv946hMdP2vOi0ESQB5t2ZY5ktKtXvQ,15
74
- owasp_depscan-5.4.4.dist-info/RECORD,,
69
+ owasp_depscan-5.4.5.dist-info/LICENSE,sha256=oQnCbnZtJ_NLDdOLc-rVY1D1N0RNWLHPpYXcc77xzSo,1073
70
+ owasp_depscan-5.4.5.dist-info/METADATA,sha256=jSsZhK0V6ghp9xFLiUe1Ghl4EHAbtRmf6WyreEi5NLo,27338
71
+ owasp_depscan-5.4.5.dist-info/WHEEL,sha256=cVxcB9AmuTcXqmwrtPhNK88dr7IR_b6qagTj0UvIEbY,91
72
+ owasp_depscan-5.4.5.dist-info/entry_points.txt,sha256=FxQKHFWZTfKU2eBxHPFRxwhSNexntYygYhquykS8zxA,69
73
+ owasp_depscan-5.4.5.dist-info/top_level.txt,sha256=qbHOZvNU2dXANv946hMdP2vOi0ESQB5t2ZY5ktKtXvQ,15
74
+ owasp_depscan-5.4.5.dist-info/RECORD,,