Client as used by dependency-check-maven fails with NullPointerException about ossindex-public HOT 7 CLOSED

Seems like response changed and does not contain coordinates for ComponentReport deserialization:

[
    {
        "description":"",
        "reference":"https://ossindex.sonatype.org/component/pkg:maven/commons-lang/[email protected]?utm_source=dependency-check&utm_medium=integration&utm_content=7.1.0",
        "vulnerabilities":[
        ],
        "sonatypeOssiScore":0.0
    }
]

from ossindex-public.

Seems like response changed and does not contain coordinates for ComponentReport deserialization:

[
    {
        "description":"",
        "reference":"https://ossindex.sonatype.org/component/pkg:maven/commons-lang/[email protected]?utm_source=dependency-check&utm_medium=integration&utm_content=7.1.0",
        "vulnerabilities":[
        ],
        "sonatypeOssiScore":0.0
    }
]

I tested that specific component and I did get a response with coordinates:

[
	{
		"coordinates": "pkg:maven/commons-lang/[email protected]",
		"description": "",
		"reference": "https://ossindex.sonatype.org/component/pkg:maven/commons-lang/[email protected]?utm_source=insomnia&utm_medium=integration&utm_content=2022.3.0",
		"vulnerabilities": [],
		"sonatypeOssiScore": 0.0
	}
]

from ossindex-public.

Looks like now it depends if you provide credentials or not: jeremylong/DependencyCheck#4535 (comment)

from ossindex-public.

I didn't provide any credentials.

Here's a cURL export of my request:

curl --request POST \
  --url https://ossindex.sonatype.org/api/v3/component-report \
  --header 'Accept: application/vnd.ossindex.component-report.v1+json' \
  --header 'Content-Type: application/vnd.ossindex.component-report-request.v1+json' \
  --data '{
    "coordinates":[
    		"pkg:maven/commons-lang/[email protected]"
		]
}
'

from ossindex-public.

It's fixed now: jeremylong/DependencyCheck#4535 (comment)

from ossindex-public.

This problem no longer manifests.

from ossindex-public.

Thanks for letting us know. We have been chasing down a variety of edge cases causing problems, so I am glad one of them resolved your issue. Sorry for the inconvenience.

from ossindex-public.