BSD Portssecurity/owasp-dependency-check 3.1.1 MidnightBSD
Detects publicly disclosed vulnerabilities in project dependencies
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- Last update
- Commit
a02f4d9c2b- License
- Apache-2.0
- Categories
- security, java
Description
Dependency-Check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries.
Install
Binary package:
mport install owasp-dependency-checkFrom mports:
cd /usr/mports/security/owasp-dependency-check && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= owasp-dependency-check>0:security/owasp-dependency-checkDependencies
As this port's Makefile names them.
Build 2
mvn: java/maven-wrappermaven>0: java/maven
Build dependencies 2
No port depends on this one.
Configuration
No options to configure.
- USES
- java
- Service scripts
- none
Files
distinfo 2
| File | Size | SHA256 |
|---|---|---|
| owasp-dependency-check-3.1.1-maven-repository.tar.gz | 1.10896009e+08 | 27d27cfa9659c0c4b03dc311e994570641caa2b5db558731bea2a1904fca31b9 |
| jeremylong-DependencyCheck-v3.1.1_GH0.tar.gz | 7.0973557e+07 | 63c89d2263a5dd01f7cc44e22b1172989192b928ff1b650277ffec13e5d168eb |
Master sites 1
- FREEBSD_LOCAL/pi/:source2
Commit history 1
| Date | Commit | Credits | Log message |
|---|---|---|---|
a02f4d9c2b |
Lucas Holt | security/owasp-dependency-check: build CLI module only Export JAVA_HOME for the Maven build and restrict the offline reactor to the CLI module plus required dependencies. The port only packages the CLI jar, and this avoids the unused Maven plugin module that requires missing offline artifacts.
AI-Assisted-by: OpenAI Codex <[email protected]>
Signed-off-by: Lucas Holt <[email protected]> |