Comments (3)
prabhu
commented on May 28, 2024
There was a regression briefly in cdxgen which was pushing out null values in JS mode. Looks like you have caught this issue at the wrong moment. Thank you for the suggested fix. I'm in the process of changing the key format for license so that it will become name@version if there are no vendor information. Will leave a comment once the new version is available which additionally would bring ruby support if you are interested.
Also not sure how you are using dep-scan but feel free to try out the parent project scan which also includes depscan and the correct version of dependencies. https://slscan.io/en/latest/
from dep-scan.
ocrawford555
commented on May 28, 2024
Sweet, will look into it, thanks! Feel free to close the issue off when you think it's fixed.
from dep-scan.
prabhu
commented on May 28, 2024
This is resolved. Thanks for your help!
from dep-scan.
Related Issues (20)
- Feature: Support for larger 10 year vulnerability database
- Bug: unwanted info message on windows
- False-Positive: rpm:tar is matching npm:tar
- False-Positive: pkg:composer/samdark/[email protected]
- False-Positive: pkg:composer/nette/[email protected] HOT 4
- False-Positive: pkg:composer/psr/[email protected] HOT 1
- Documentation about profiles HOT 4
- Feature: Meta and starter packages such as spring starter could be handled better
- Bug: Server mode - Scanning a GitHub repo not working HOT 1
- Feature: Linux OS scanning needs work
- [v6] Feature: disable use of remote audit by default HOT 2
- [ci] Some tests are failing with out of space errors HOT 1
- False-Positive: CVE-2022-3704
- Feature: 1. more complete report in json and cyclonedx-json. 2. error when get sbom from trivy or syft. HOT 6
- Bug: cvss score is appearing as 0 from certain CVEs HOT 3
- Bug: cvss score for pypi vulnerabilities are incorrect HOT 1
- Bug: Pypi misses
- Feature: nu plugin
- Feature: pyproject.nix poc
- Feature: Support for nix packages
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dep-scan.