intel / cve-bin-tool

The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 200 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.
https://cve-bin-tool.readthedocs.io/en/latest/
GNU General Public License v3.0
1.19k stars 457 forks source link

feat: add support for yarn (fixes #4266) #4290

Closed vpavankalyan closed 1 month ago

vpavankalyan commented 2 months ago

feat: added support for yarn

fixes: #4266

vpavankalyan commented 2 months ago

Thanks @terriko for the detailed reply, I will make the necessary changes and get back to you ASAP. Might need a little help with the test but would definitely love to own the issue end-end.

terriko commented 2 months ago

Just a quick heads up in case you're wondering why the tests aren't running: you've currently got a merge conflict in parsers/javascript.py and that needs to be resolved before they can run.

vpavankalyan commented 1 month ago

Thanks @terriko, you have made it look so easy for beginners like myself, would love to continue contributing.