Socket
Socket
Sign inDemoInstall

snyk-to-html

Package Overview
Dependencies
21
Maintainers
1
Versions
55
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 1.13.1 to 1.14.0

template/test-cve-report.hbs

23

dist/lib/snyk-to-html.js

@@ -63,2 +63,3 @@ #!/usr/bin/env node

function metadataForVuln(vuln) {
let { cveSpaced, cveLineBreaks } = concatenateCVEs(vuln);
return {

@@ -74,4 +75,26 @@ id: vuln.id,

packageManager: vuln.packageManager,
version: vuln.version,
cvssScore: vuln.cvssScore,
cveSpaced: cveSpaced || 'No CVE found.',
cveLineBreaks: cveLineBreaks || 'No CVE found.',
disclosureTime: dateFromDateTimeString(vuln.disclosureTime || ''),
publicationTime: dateFromDateTimeString(vuln.publicationTime || ''),
license: vuln.license || undefined
};
}
function concatenateCVEs(vuln) {
let cveSpaced = '';
let cveLineBreaks = '';
if (vuln.identifiers) {
vuln.identifiers.CVE.forEach(function (c) {
let cveLink = `<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=${c}">${c}</a>`;
cveSpaced += `${cveLink}&nbsp;`;
cveLineBreaks += `${cveLink}</br>`;
});
}
return { cveSpaced, cveLineBreaks };
}
function dateFromDateTimeString(dateTimeString) {
return dateTimeString.substr(0, 10);
}
function groupVulns(vulns) {

@@ -78,0 +101,0 @@ const result = {};

3

package.json

@@ -14,2 +14,3 @@ {

"report": "mkdir -p output && cat sample-data/test-report.json | node dist/. > output/test-report.html && open output/test-report.html",
"report:cve": "mkdir -p output && cat sample-data/test-report.json | node dist/. -t template/test-cve-report.hbs > output/test-report.html && open output/test-report.html",
"multi-report": "mkdir -p output && cat sample-data/multi-test-report.json | node dist/. > output/multi-test-report.html && open output/multi-test-report.html",

@@ -65,3 +66,3 @@ "prepare": "npm run build"

},
"version": "1.13.1"
"version": "1.14.0"
}

Sorry, the diff of this file is not supported yet

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc