dependency-check 0.1.0

Usage

After installation, you’ll have the dependency-check command available that, on first use, will automatically download and install the OWASP release archive once for all projects. It’ll then redirect any calls to that installation, meaning the downloaded NVD data is shared amongst projects. Please see the DependencyCheck site for more configuration and usage details.

To install from PyPI, add dependency-check to your dev-requirements.txt or a similar file. For more installation options, see the next section.

To just get the dependency-check CLI tool installed into your home, independant of any project, you can use the pip script installer.

Customization

Using environment variables, you can change the version and download location of the release archive, and the directory for the local installation.

To update to a new version of the OWASP software, delete ~/.local/dependency-check/bin/, set DEPENDENCY_CHECK_VERSION to the new version number, and call dependency-check.

Installation

dependency-check can be installed via pip install dependency-check as usual, see releases for an overview of available versions. To get a bleeding-edge version from source, use these commands:

repo="jhermann/dependency-check-py"
pip install -r "https://raw.githubusercontent.com/$repo/master/requirements.txt"
pip install -UI -e "git+https://github.com/$repo.git#egg=dependency-check"

As a developer, to create a working directory for this project, call these commands:

git clone "https://github.com/jhermann/dependency-check-py.git"
cd "dependency-check-py"
. .env --yes --develop
invoke build check

You might also need to follow some setup procedures to make the necessary basic commands available on Linux, Mac OS X, and Windows.