Capabilities

Dart

Dart package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + EvidencePackage URL TypeLicenseDependenciesPackage Manager Claims
DepthEdgesKindsFilesDigestsIntegrity Hash
dart-pubspec-cataloger
pubspec.yml, pubspec.yaml
pkg:pubDirectRuntime
dart-pubspec-lock-cataloger
pubspec.lock
pkg:pubTransitiveRuntime, Dev

Vulnerability scanning

Data SourceDisclosuresFixesTrack by
Source
Package
AffectedDateVersionsDate
National Vulnerability Database (NVD)

Grype Configuration
Configuration KeyDescription
match.stock.using-cpesUse CPE package identifiers to find vulnerabilities

Next steps