Repository: dependency-check/DependencyCheck (language: java)

Issue:
[FP]: phpunit/php-invoker is matched as core PHPUnit framework
### Package URl

pkg:composer/phpunit/php-invoker@5.0.1

### CPE

`cpe:2.3:a:phpunit_project:phpunit:5.0.1:*:*:*:*:*:*:*`

### CVE

CVE-2017-9841

### ODC Integration

{"label" => "CLI"}

### ODC Version

12.1.0

### Description

[php-invoker](https://github.com/sebastianbergmann/php-invoker) is an independent project, with independent versioning structure (latest release on Feb 7 as version 6). [PHPUnit](https://github.com/sebastianbergmann/phpunit) framework released version 12 on Feb 7. Considering them both the same results in vulnerabilities being incorrectly identified.


Discussion / hints:

Fix patch:
diff --git a/generatedSuppressions.xml b/generatedSuppressions.xml
index 0b5da78b97..b5d9b469de 100644
--- a/generatedSuppressions.xml
+++ b/generatedSuppressions.xml
@@ -2237,6 +2237,13 @@ only pkg:maven/org.clojure:clojure@.* is the CPE cpe:/a:clojure:clojure
    <packageUrl regex="true">^pkg:nuget/Microsoft\.AspNetCore\.Authentication\.OpenIdConnect@.*$</packageUrl>
    <cpe>cpe:/a:openid:openid_connect</cpe>
 </suppress>
+<suppress base="true">
+   <notes><![CDATA[
+   FP per issue #7581
+   ]]></notes>
+   <packageUrl regex="true">^pkg:composer/phpunit/php-invoker@.*$</packageUrl>
+   <cpe>cpe:/a:phpunit_project:phpunit</cpe>
+</suppress>
 <suppress base="true">
    <notes><![CDATA[
    FP per issue #7582


Test patch: