Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Kiuwan Insights uses the following resources to extract information on 3rd party dependencies.

 

Supported languagesSupported repositoriesSupported build systemsRepositories UsedDatabase Vulnerabilities UsedLicenses extract from
Java
  • Maven
  • Gradle
  • Ant (*.xml files)
  • Maven (pom.xml files)
  • Gradle (*.gradle files)
  • *.jar, *.war, *.ear files

Maven (central or others configured in settings.xml or pom.xml files):

https://repo.maven.apache.org/maven2/

  • pom.xml
  • License file into jar file.
Javascript
  • Npm
  • Bower
  • Npm (package.json files)
  • Bower (bower.json files)
Yarn 
  • Yarn (package.json files)
Npm: https://www.npmjs.com/

 

  • NPM Rest services.
.Net
  • Nuget
  • Nuget (*.csproj, project.json, global.json, *.vbproj files)
Nuget: https://www.nuget.org/
  • Nuget Rest services.
Python
  • PyPI
  • GitHub
  • PyPI (setup.py files)
  • Requirements (txt file with declared dependencies)
PyPI: https://pypi.org/
  • PyPI Rest services
Scala
  • Maven

  • SBT (build.sbt)

Maven (central or others configured in settings.xml or pom.xml files):

https://repo.maven.apache.org/maven2/

  • pom.xml.
Swift
  • Cocoapods
  • GitHub
  • Podspec (*.podspec, Podfile.lock files)
  • Package (Package.swift files)

Repository Podspec in Github:

https://github.com/CocoaPods/Specs

  • podspec.json of component.
Php
  • Packagist
  • Composer (composer.json, composer.lock files)
Packagist: https://packagist.org/
  • Packagist Rest services.
Ruby
  • RubyGems
  • Gemfile,
 Gemfile
  • Gemfile.
lock and
  • lock and *.gemspec files
RubyGems: https://rubygems.org/
  • License and obsolescence pending
Kotlin
  • Maven
  • Gradle
  • Ant
  • Ant (*.xml files)
  • Maven (pom.xml files)
  • Gradle (*.gradle and *.gradle.kts files)

Maven (central or others configured in settings.xml or pom.xml files):

https://repo.maven.apache.org/maven2/

  • Maven services

Database vulnerabilities

NVD: https://nvd.nist.gov/

NSP (Node Security Platform): https://nodesecurity.io/

 

 

From these sources, Kiuwan Insight builds the Components Inventory of your application.

...