mirror of
https://github.com/ysoftdevs/DependencyCheck.git
synced 2026-03-21 16:49:43 +01:00
Docs: Added node.js page, fixed typos in Python page.
This commit is contained in:
14
src/site/markdown/analyzers/nodejs.md
Normal file
14
src/site/markdown/analyzers/nodejs.md
Normal file
@@ -0,0 +1,14 @@
|
||||
Node.js Analyzer
|
||||
================
|
||||
|
||||
OWASP dependency-check includes an analyzer that will scan [Node Package Manager](https://www.npmjs.com/)
|
||||
package specification files. The analyzer(s) will collect as much information
|
||||
it can about the package. The information collected is internally referred to
|
||||
as evidence and is grouped into vendor, product, and version buckets. Other
|
||||
analyzers later use this evidence to identify any Common Platform Enumeration
|
||||
(CPE) identifiers that apply.
|
||||
|
||||
__Note:__ Also consider using the Node Security Project auditing tool,
|
||||
[nsp](https://nodesecurity.io/tools).
|
||||
|
||||
Files Types Scanned: [package.json](https://docs.npmjs.com/files/package.json)
|
||||
Reference in New Issue
Block a user