basiliskscan 1.5.28

BasiliskScan - CLI para varrer projetos e listar dependências vulneráveis ou desatualizadas.

BasiliskScan

Advanced CLI for dependency and vulnerability analysis in software projects.

Installation

pip install basiliskscan

Quick Start

bscan --version
bscan --help
bscan scan

If bscan is not recognized on Windows, run once:

python -m basiliskscan --help

This command auto-adds your Python Scripts directory to PATH (user scope).

What BasiliskScan does

• Recursively discovers dependencies in supported manifests
• Aggregates vulnerability data from OSV, NVD, and Sonatype Guide
• Supports offline vulnerability database mode
• Generates rich HTML reports

Architecture (MVC-inspired for CLI)

The codebase is organized into clear layers to keep the CLI thin:

• controllers/: flow orchestration (scan, offline DB, credentials)
• services/: business logic and integrations (scanner, updater, ingest)
• parsers/: ecosystem parsers focused on dependency extraction
• reports/: HTML report generator and assets
• views/: terminal UI and help text
• models/: domain models (components, vulnerabilities)

Supported Files

• Node.js / Ionic: package.json, package-lock.json, npm-shrinkwrap.json
• Java: pom.xml, build.xml, build.gradle, build.gradle.kts, gradle.lockfile

Useful Commands

# Main scan command
bscan scan --help

# NVD credentials
bscan nvd-key --help

# Sonatype Guide credentials
bscan sonatype-guide-key --help

# Offline database operations
bscan offline-db --help

Optional Environment Configuration

Create a .env file in your working directory:

NVD_API_KEY=your-nvd-api-key

Project Links

• Homepage: https://github.com/puuertA/basiliskscan
• Repository: https://github.com/puuertA/basiliskscan
• Issues: https://github.com/puuertA/basiliskscan/issues

For complete documentation (including Portuguese version), visit the GitHub repository.