AppThreat's vulnerability database and package search library with a built-in file based storage. CVE, GitHub, npm are the primary sources of vulnerabilities.
Project description
Introduction
This repo is a vulnerability database and package search for sources such as NVD, GitHub and so on. It uses a built-in file based storage to allow offline access.
Installation
pip install appthreat-vulnerability-db
Usage
This package is ideal as a library for managing vulnerabilities. This is used by dep-scan, a free open-source dependency audit tool. However, there is a limited cli capability available with few features to test this tool directly.
Cache vulnerability data
vdb --cache
It is possible to customise the cache behaviour by increasing the historic data period to cache by setting the following environment variables.
- NVD_START_YEAR - Default: 2016. Supports upto 2002
- GITHUB_PAGE_COUNT - Default: 5. Supports upto 20
Periodic sync
To periodically sync the latest vulnerabilities and update the database cache.
vdb --sync
Basic search
It is possible to perform simple search using the cli.
vdb --search android:8.0
vdb --search google:android:8.0
vdb --search android:8.0,simplesamlphp:1.14.11
Syntax is package:version,package:version or vendor : package : version (Without space)
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for appthreat-vulnerability-db-1.6.1.tar.gz
Algorithm | Hash digest | |
---|---|---|
SHA256 | 1e2f7e2aa991dc2215ff33c49e48690b66305b253abc7ef1f7b53431f5d002bc |
|
MD5 | c1a85d4f9e82cba18ffdf3ade0d4d7a5 |
|
BLAKE2b-256 | 14b3dd31534f4cd4b115abd6e1845b088ce95aad1849f2560b93be4afac749aa |
Hashes for appthreat_vulnerability_db-1.6.1-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 9b5345057b259b577f8eaf082976ab2f68b6168414a717ab488c37450bc9c684 |
|
MD5 | 326340397840a650509b8e12b2688e33 |
|
BLAKE2b-256 | a1bc082e59abdf110c0be25d59b89336a4dd9161a899e8c20c68f75d3a2c3790 |