From 62c05049a7c4a50dd05f6a945dbd659afc43cb23 Mon Sep 17 00:00:00 2001 From: Dale Visser Date: Wed, 26 Aug 2015 14:25:32 -0400 Subject: [PATCH] Docs: Added node.js page, fixed typos in Python page. --- src/site/markdown/analyzers/nodejs.md | 14 ++++++++++++++ src/site/markdown/analyzers/python.md | 13 +++++++------ src/site/site.xml | 3 +++ 3 files changed, 24 insertions(+), 6 deletions(-) create mode 100644 src/site/markdown/analyzers/nodejs.md diff --git a/src/site/markdown/analyzers/nodejs.md b/src/site/markdown/analyzers/nodejs.md new file mode 100644 index 000000000..e987d7541 --- /dev/null +++ b/src/site/markdown/analyzers/nodejs.md @@ -0,0 +1,14 @@ +Node.js Analyzer +================ + +OWASP dependency-check includes an analyzer that will scan [Node Package Manager](https://www.npmjs.com/) +package specification files. The analyzer(s) will collect as much information +it can about the package. The information collected is internally referred to +as evidence and is grouped into vendor, product, and version buckets. Other +analyzers later use this evidence to identify any Common Platform Enumeration +(CPE) identifiers that apply. + +__Note:__ Also consider using the Node Security Project auditing tool, +[nsp](https://nodesecurity.io/tools). + +Files Types Scanned: [package.json](https://docs.npmjs.com/files/package.json) diff --git a/src/site/markdown/analyzers/python.md b/src/site/markdown/analyzers/python.md index af77720aa..7ad7eeee8 100644 --- a/src/site/markdown/analyzers/python.md +++ b/src/site/markdown/analyzers/python.md @@ -1,10 +1,11 @@ Python Analyzer ============== -OWASP dependency-check includes an analyzer that will scan Python artifacts. The -analyzer(s) will collect as much information it can about the python artifacts. -The information collected is internally referred to as evidence and is grouped into -vendor, product, and version buckets. Other analyzers later use this evidence to -identify any Common Platform Enumeration (CPE) identifiers that apply. +OWASP dependency-check includes an analyzer that will scan Python artifacts. +The analyzer(s) will collect as much information it can about the Python +artifacts. The information collected is internally referred to as evidence and +is grouped into vendor, product, and version buckets. Other analyzers later +use this evidence to identify any Common Platform Enumeration (CPE) +identifiers that apply. -Files Types Scanned: py, whl, egg, zip, PKG-INFO, and METADATA +Files Types Scanned: py, whl, egg, zip, PKG-INFO, and METADATA \ No newline at end of file diff --git a/src/site/site.xml b/src/site/site.xml index bde648d43..78750b929 100644 --- a/src/site/site.xml +++ b/src/site/site.xml @@ -128,6 +128,9 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved. Nexus Analyzer + + Node.js Analyzer + Nuspec Analyzer