diff --git a/src/site/markdown/analyzers/nodejs.md b/src/site/markdown/analyzers/nodejs.md index 103a0354f..3920ba7bb 100644 --- a/src/site/markdown/analyzers/nodejs.md +++ b/src/site/markdown/analyzers/nodejs.md @@ -8,7 +8,8 @@ as evidence and is grouped into vendor, product, and version buckets. Other analyzers later use this evidence to identify any Common Platform Enumeration (CPE) identifiers that apply. -__Note:__ Also consider using the Node Security Project auditing tool, -[nsp](https://nodesecurity.io/tools). +Note:_Consider using [Retire.js](http://retirejs.github.io/retire.js/) or the +Node Security Project auditing tool, [nsp](https://nodesecurity.io/tools) instead +of, or in addition to OWASP dependency-check to analyze Node.js packages. Files Types Scanned: [package.json](https://docs.npmjs.com/files/package.json) diff --git a/src/site/markdown/analyzers/ruby-gemspec.md b/src/site/markdown/analyzers/ruby-gemspec.md index ece5d3bb8..04116f442 100644 --- a/src/site/markdown/analyzers/ruby-gemspec.md +++ b/src/site/markdown/analyzers/ruby-gemspec.md @@ -9,7 +9,7 @@ into vendor, product, and version buckets. Other analyzers later use this evidence to identify any Common Platform Enumeration (CPE) identifiers that apply. -__Note:__ Also consider using the Ruby -[bundler-audit](https://github.com/rubysec/bundler-audit#readme) tool. +Note: It is highly recommended that Ruby projects use +[bundler-audit](https://github.com/rubysec/bundler-audit#readme). Files Types Scanned: Rakefile, \*.gemspec \ No newline at end of file