#** This file is part of DependencyCheck. DependencyCheck is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. DependencyCheck is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with DependencyCheck. If not, see http://www.gnu.org/licenses/. Copyright (c) 2012 Jeremy Long. All Rights Reserved. @author Jeremy Long @version 1 *# #[[

Dependency Report

]]#

Project: $esc.html($applicationName)

Report Generated On: $date

Dependencies Scanned: $dependencies.size()

#foreach($dependency in $dependencies) $esc.html($dependency.FileName)
#end

Dependencies

#set($cnt=0) #foreach($dependency in $dependencies)

$esc.html($dependency.FileName)

#if ($dependency.description)

Description: $esc.html($dependency.description)

#end

#if ($dependency.license) License:

$esc.html($dependency.license)
#end File Path: $esc.html($dependency.FilePath)
MD5: $esc.html($dependency.Md5sum)
SHA1: $esc.html($dependency.Sha1sum)

#if ( $dependency.analysisExceptions.size() != 0 ) #set($cnt=$cnt+1)

Exceptions Occured During Analysis

#end #set($cnt=$cnt+1)

Evidence

#set($cnt=$cnt+1) #set($cpeCount=0) #foreach($id in $dependency.getIdentifiers()) #if($id.type.equals("cpe")) #set($cpeCount=$cpeCount+1) #end #end

Identifiers

##: $esc.html($cpevalue)
#if($cpeCount>1) Several possible CPEs where identified. If one of the following are correct please update the configuration to set the hash code for this file to the CPE entry below.

#end #if($dependency.getIdentifiers().size()==0)
  • None
#end #if($dependency.getIdentifiers().size()>0)
    #foreach($id in $dependency.getIdentifiers()) ##yes, we are HTML Encoding the href. this is okay. We can't URL encode as we have to trust the analyzer here...
  • $esc.html($id.type): $esc.html($id.title) : $esc.html($id.value) #if( $id.descrription )
    $esc.html($id.description) #end
    • #end
#end
#if($dependency.getVulnerabilities().size()>0) #set($cnt=$cnt+1)

Published Vulnerabilities

#foreach($vuln in $dependency.getVulnerabilities())

$esc.html($vuln.name)

$esc.html($vuln.description) #if ($vuln.getReferences().size()>0)

    #foreach($ref in $vuln.getReferences())
  • $esc.html($ref.source) - $ref.name
    • #end
#end

#end
#end
#end