The vulnerability database seems to be outdated. Result might be thus inaccurate. Contact the administrator, please.
}
@for(limitation <- limitations){
Limitation: @limitation.message
}
@(vulnerableMain, vulnerableTransitive) match {
case (false, false) => {
No vulnerability has been found in the library@if(includesTransitive){ or in its transitive dependencies}.
@if(requiresAttention){However, take care of the limitations above, please.}
}
case (false, true) => {
While there is no vulnerability found in the library itself, but scan has identified some issues in its transitive dependencies. Maybe you should evict some dependency with a fixed version. @vulnerabilityAdvice()
}
case (true, false) => {
There is a vulnerability found in the main dependency. Transitive dependencies are OK. Please consider using a patched version or consider impact of the vulnerabilities. @vulnerabilityAdvice()
}
case (true, true) => {
There is a vulnerability found in both the main dependency and transitive dependencies. Please consider using a patched version or consider impact of the vulnerabilities. @vulnerabilityAdvice()
Those vulnerabilities are primarily sorted by highest-rated known vulnerability. Transitive dependencies without a known vulnerability are at the end of the list.
}else{
There is no known vulnerability in transitive dependencies. They are listed just for your information.