When a package is missing a version OSS Index is searched for all package versions. This can lead to false positive vulnerability reports. This PR adds a warning in the event of missing package versions
This pull request makes the following changes:
Adds check to the internal function generate_purls() to identify missing package versions
The function now generates a message in the console via `cli_() functions if packages are missing versions
There should be no breaking changes or changes to existing behavior.
cc @bhamail / @DarthHater / @brittanybelle / @adrianpowell / @csgillespie
When a package is missing a version OSS Index is searched for all package versions. This can lead to false positive vulnerability reports. This PR adds a warning in the event of missing package versions
This pull request makes the following changes:
generate_purls()
to identify missing package versionsThere should be no breaking changes or changes to existing behavior.
cc @bhamail / @DarthHater / @brittanybelle / @adrianpowell / @csgillespie