Dependency-Check Core 11.1.0 API

Packages

Package	Description
org.owasp.dependencycheck	Includes the main entry point for dependency-check.
org.owasp.dependencycheck.agent	The agent package holds an agent API that can be used by other applications that have information about dependencies; but would rather implement something in their code directly rather then spawn a process to run the entire dependency-check engine.
org.owasp.dependencycheck.analyzer	Analyzers are used to inspect the identified dependencies, collect Evidence, and process the dependencies.
org.owasp.dependencycheck.analyzer.exception	A collection of exception classes used within the analyzers.
org.owasp.dependencycheck.data.artifactory	Contains classes related to searching Artifactory Maven repository. These are used to abstractArtifactory searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.cache	Implements a generic persisted cache that can be used to store results of external analysis between executions.
org.owasp.dependencycheck.data.central	Contains classes related to searching Maven Central. These are used to abstract Maven Central searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.composer	Model elements for PHP Composer files
org.owasp.dependencycheck.data.cpe	Contains classes for working with the CPE Lucene Index.
org.owasp.dependencycheck.data.cwe	Contains classes for working with the CWE Database.
org.owasp.dependencycheck.data.elixir	Contains classes for working with various Elixir project data.
org.owasp.dependencycheck.data.golang	Contains classes for working with the Go Lang project data.
org.owasp.dependencycheck.data.knownexploited.json
org.owasp.dependencycheck.data.lucene	Contains classes used to work with the Lucene Indexes.
org.owasp.dependencycheck.data.nexus	Contains classes related to searching a Nexus repository. These are used to abstract Nexus searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.nodeaudit	Contains classes related to searching via Node Audit API. These are used to abstract Node Audit searching away from OWASP Dependency Check so they can be reused elsewhere.
org.owasp.dependencycheck.data.nuget	Contains classes related to parsing Nuget related files These are used to abstract away Nuget-related handling from Dependency Check so they can be used elsewhere.
org.owasp.dependencycheck.data.nvd.ecosystem	Contains utility classes used to identify the ecosystem for CPEs from the NVD.
org.owasp.dependencycheck.data.nvdcve	Contains classes used to work with the NVD CVE data.
org.owasp.dependencycheck.data.ossindex	Support for Sonatype OSS Index analysis.
org.owasp.dependencycheck.data.update	Contains classes used to update the data stores. The UpdateService will load, any correctly defined CachedWebDataSource(s) and call update() on them.
org.owasp.dependencycheck.data.update.cisa	Contains classes used to parse the CISA Known Exploited Vulnerability Catalog.
org.owasp.dependencycheck.data.update.cpe	Contains classes used to parse the CPE XML file from NIST. These classes are not used as they add no value over the existing CPE data contained within the CVE data from the NVD.
org.owasp.dependencycheck.data.update.exception	A collection of exception classes used within the application.
org.owasp.dependencycheck.data.update.nvd.api	Contains classes used to download, parse, and load the NVD API CVE data from NIST into the local database.
org.owasp.dependencycheck.dependency	Contains the core Dependency implementation.
org.owasp.dependencycheck.dependency.naming	A collection of identifiers for Dependency objects.
org.owasp.dependencycheck.exception	A collection of exception classes used within the application.
org.owasp.dependencycheck.processing	Classes used to process the output of external tools.
org.owasp.dependencycheck.reporting	Contains classes used to generate reports.
org.owasp.dependencycheck.utils	Includes various utility classes such as a Settings wrapper, a Checksum utility, etc.
org.owasp.dependencycheck.xml	Contains classes used to fix XML prior to parsing.
org.owasp.dependencycheck.xml.assembly	Support classes for parsing GrokAssembly output.
org.owasp.dependencycheck.xml.hints	Contains classes used to parse the hints file to add evidence to dependencies.
org.owasp.dependencycheck.xml.pom	This package contains classes used to parse pom.xml files.
org.owasp.dependencycheck.xml.suppression	Contains classes used to suppress findings.