is_pkg_vulnerable: Detect if package within ecosystem has reported...

In rosv: Client to Access and Operate on the 'Open Source Vulnerability' API

Detect if package within ecosystem has reported vulnerabilities

Description

Search the OSV database, by package name and its respective ecosystem, to determine if a vulnerability has ever been listed. If a package has been listed as impacted by a vulnerability this may warrant further queries to investigate specific versions that have been affected.

Usage

is_pkg_vulnerable(name, ecosystem, ...)

Arguments

name	Character vector of package names.
ecosystem	Character vector of ecosystem(s) within which the package(s) exist.
...	Any other parameters to pass to nested functions.

Value

A named vector of logical values indicating vulnerabilities.

Examples

is_pkg_vulnerable(c('dask', 'dplyr'), c('PyPI', 'CRAN'))

rosv documentation built on May 29, 2024, 2:58 a.m.