Skip navigation links

Dependency-Check Core 2.0.1 API

Packages 
Package Description
org.owasp.dependencycheck
Includes the main entry point for dependency-check.
org.owasp.dependencycheck.agent
The agent package holds an agent API that can be used by other applications that have information about dependencies; but would rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.
org.owasp.dependencycheck.analyzer
Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.
org.owasp.dependencycheck.analyzer.exception
A collection of exception classes used within the analyzers.
org.owasp.dependencycheck.data.central
Contains classes related to searching Maven Central.

These are used to abstract Maven Central searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.composer
Model elements for PHP Composer files
org.owasp.dependencycheck.data.cpe
Contains classes for working with the CPE Lucene Index.
org.owasp.dependencycheck.data.cwe
Contains classes for working with the CWE Database.
org.owasp.dependencycheck.data.lucene
Contains classes used to work with the Lucene Indexes.
org.owasp.dependencycheck.data.nexus
Contains classes related to searching a Nexus repository.

These are used to abstract Nexus searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.nsp
Contains classes related to searching Node Security Platform (nsp).

These are used to abstract NSP searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.nuget
Contains classes related to parsing Nuget related files

These are used to abstract away Nuget-related handling from Dependency Check so they can be used elsewhere.
org.owasp.dependencycheck.data.nvdcve
Contains classes used to work with the NVD CVE data.
org.owasp.dependencycheck.data.update
Contains classes used to update the data stores.

The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them.
org.owasp.dependencycheck.data.update.cpe
Contains classes used to parse the CPE XML file from NIST.

These classes are not used as they add no value over the existing CPE data contained within the CVE data from the NVD.
org.owasp.dependencycheck.data.update.exception
A collection of exception classes used within the application.
org.owasp.dependencycheck.data.update.nvd
Contains classes used to download, parse, and load the NVD CVE data from NIST into the local database.

org.owasp.dependencycheck.dependency
Contains the core Dependency implementation.
org.owasp.dependencycheck.exception
A collection of exception classes used within the application.
org.owasp.dependencycheck.reporting
Contains classes used to generate reports.
org.owasp.dependencycheck.utils
Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.
org.owasp.dependencycheck.xml
Contains classes used to fix XML prior to parsing.
org.owasp.dependencycheck.xml.hints
Contains classes used to parse the hints file to add evidence to dependencies.
org.owasp.dependencycheck.xml.pom
This package contains classes used to parse pom.xml files.
org.owasp.dependencycheck.xml.suppression
Contains classes used to suppress findings.
Skip navigation links

Copyright © 2012–2017 OWASP. All rights reserved.