search

aboutcode-org / purldb

Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss
https://purldb.readthedocs.io/
35 stars 23 forks source link

Collect common Microsoft SDKs and runtimes #475

Open pombredanne opened 5 months ago

pombredanne commented 5 months ago

When analyzing Windows and .NET applications, there are always a certain number of DLLs that are not found in NuGet packages but are provided by Microsoft as part of SDKs. There are also legacy code from codeplex or code from the codeproject

Therefore, it would be useful to collect common Microsoft SDKs and runtimes, and related so they can be indexed and matched such as these PURLs:

pkg:generic/codeproject?download_url=http://www.codeproject.com/Articles/25058/ListView-Layout-Manager
pkg:generic/codeproject?download_url=http://www.codeproject.com/Articles/58740/FileSystemWatcher-Pure-Chaos-Part-of
pkg:generic/codeproject?download_url=http://www.codeproject.com/csharp/adobe_cp_clone_part_1.asp
pkg:generic/codeproject?download_url=https://www.codeproject.com/Articles/1101956/Check-for-Clock-Tampering-to-Extend-Licence-Durati
pkg:generic/coderelief/wpf-window-disable?download_url=https://web.archive.org/web/20210120162655/http://coderelief.net/2010/04/19/wpf-window-disable-minimize-and-maximize-buttons-through-attached-properties-from-xaml/#comment-329
pkg:generic/danlamping?download_url=https://sites.google.com/a/wpfmentor.com/resources/triggertracingsample
pkg:generic/dlaa.me@3.2.0?download_url=https://dlaa.me/blog/post/9380245
pkg:generic/dotnettrix/tabcontrol?download_url=https://dotnetrix.co.uk/controls.htm
pkg:generic/microsoft-netmatters?download_url=https://web.archive.org/web/20170114002129if_/http://download.microsoft.com/download/f/2/7/f279e71e-efb0-4155-873d-5554a0608523/NetMatters2007_04.exe
pkg:generic/Microsoft.DirectX?download_url=https://download.microsoft.com/download/8/4/A/84A35BF1-DAFE-4AE8-82AF-AD2AE20B6B14/directx_Jun2010_redist.exe
pkg:generic/Microsoft.SQL.Server.Compact@4.0.8876.1?download_url=https://download.microsoft.com/download/F/F/D/FFDF76E3-9E55-41DA-A750-1798B971936C/ENU/SSCERuntime_x64-ENU.exe
pkg:generic/Msvc.Redist@14.32.31326
pkg:github/dotnet/aspnetcore
pkg:github/dotnet/aspnetcore@50b7e9c661453874aa7a54a3985d5120564bb2e5
pkg:github/dotnet/corefx#src/System.Collections.Immutable
pkg:github/dotnet/docs@9564767df2b9623ac21a7b52a4596c36ad3e5f15
pkg:github/dotnet/icu@d77dd854ec4d9a3c4a0c584421ee393642d631ef
pkg:github/dotnet/roslyn
pkg:github/dotnet/runtime-assets@6.0#src/System.Runtime.TimeZoneData
pkg:github/dotnet/runtime@5.0.11#/src/installer/corehost/cli/ijwhost
pkg:github/dotnet/runtime@6.0.15
pkg:github/dotnet/runtime@7bcf80a9f9112b259439c7ccd6252d426a576100
pkg:github/dotnet/samples@a74e4113ca4d485e46c5d7aa8f42a163799decb2
pkg:github/dotnet/try-convert

pkg:sourceforge/boost/boost@1.56.0
pkg:sourceforge/boost/boost@1.74.0
pkg:sourceforge/cairosolutionvs2012
pkg:sourceforge/freetype@2.11.1?download_url=https://sourceforge.net/projects/freetype/files/freetype2/2.11.1/freetype-2.11.1.tar.xz/download
pkg:sourceforge/opencore-amr@0.1.5?download_url=https://sourceforge.net/projects/opencore-amr/files/opencore-amr/opencore-amr-0.1.5.tar.gz/download
pkg:sourceforge/soxr-code@945b592b70470e29f917f4de89b4281fbbd540c0?download_url=https://sourceforge.net/code-snapshots/git/s/so/soxr/code.git/soxr-code-945b592b70470e29f917f4de89b4281fbbd540c0.zip

Fake PURLs:

pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.0+4822e3c3aa77eb82b2fb33c9321f923cf11ddde6
pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.10+5a400c212afdf8e675c9a1d38442e6d2f19f7b74
pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.11+943474ca16db7c65ba6cff4a89c3ebd219dde3e5
pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.15-servicing.23115.7+5edef4b20babd4c3ddac7460e536f86fd0f2d724
pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.15+5edef4b20babd4c3ddac7460e536f86fd0f2d724
pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.16
pkg:ms-dotnet/dotnet-sdk-windows-x64-binaries@6.0.2+839cdfb0ecca5e0be3dbccd926e7651ef50fdf10

and their home and download URLs: