open-index/open-npm huggingface dataset:
npm package: @snyk/java-call-graph-builder
Description: Tool for building a call graph for JVM ecosystem (Maven, Gradle...)
Author: snyk.io
Latest version: 1.23.6

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)

***

[![Known Vulnerabilities](https://snyk.io/test/github/snyk/java-call-graph-builder/badge.svg?targetFile=package.json)](https://snyk.io/test/github/snyk/java-call-graph-builder?targetFile=package.json)


Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)


## Snyk Java Call Graph Builder

This package helps build a function call graph for a maven compiled artifact.
It is an internal component intended for use by our [CLI maven plugin](https://github.com/snyk/snyk-mvn-plugin).

# Support

❌ Not supported
❓ No issues expected but not regularly tested
✅ Supported and verified with tests

## Supported OS

| OS     |  Supported |
|--------|------------|
| Linux  |  ✅        |
| OSX    | ️✅        |
| Windows| ️✅        |

## Supported Node versions

| Node  |  Supported |
|-------|------------|
| 8     | ✅          |
| 10    | ✅          |
| 12    | ✅          |

## Supported Java & Maven versions

| Java / Maven|3.6.* |
|----------------|---|
| 8 (LTS)        | ✅ |
| 9              | ✅ |
| 10             | ✅ |
| 11 (LTS)       | ✅ |
| 12             | ✅ |
| 13             | ✅ |
npm package: @snyk/mix-parser
Description: Snyk's Mix Parser
Author: snyk.io
Latest version: 1.5.0

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)

---

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

## Snyk Elixir's Mix Manifest (mix.exs) and Lockfile (mix.lock) Parser
Given a JSON representation of the `mix.exs` and `mix.lock` files provided by [Snyk's Hex Plugin](https://github.com/snyk/snyk-hex-plugin), creates a [DepGraph](https://github.com/snyk/dep-graph) object.
npm package: @snyk/nuget-semver
Description: A semantic version parser for NuGet (https://docs.microsoft.com/en-us/nuget/reference/package-versioning), based on the API of npm's semver
Author: snyk.io
Latest version: 1.6.0

[![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)](https://snyk.io)
***

# nuget-semver

A semantic version parser for NuGet (https://docs.microsoft.com/en-us/nuget/reference/package-versioning), based on the API of npm's semver.

### License

[License: Apache License, Version 2.0](LICENSE)
npm package: @snyk/package-manager-detection
Description: A library for detecting manifest files and detecting associated package managers
Author: snyk.io
Latest version: 1.4.0

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)

***

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

| :information_source: This repository is only a package to be used with the Snyk CLI tool. To use this package to test and fix vulnerabilities in your project, install the Snyk CLI tool first. Head over to [snyk.io](https://github.com/snyk/snyk) to get started. |
| --- |

## Snyk Package Manager Detection

A library for detecting manifest files and detecting associated package managers.
npm package: @snyk/protect
Description: Snyk protect library and utility
Author: snyk.io
Latest version: 1.1304.0

# @snyk/protect

[![npm](https://img.shields.io/npm/v/@snyk/protect)](https://www.npmjs.com/package/@snyk/protect)
[![Known Vulnerabilities](https://snyk.io/test/github/snyk/snyk/badge.svg)](https://snyk.io/test/github/snyk/snyk)

![Snyk](https://snyk.io/style/asset/logo/snyk-print.svg)

Patch vulnerable code in your project's dependencies. This package is officially maintained by [Snyk](https://snyk.io).

## Usage

You don't typically need to add the @snyk/protect dependency manually. It'll be introduced when it's needed as part of [Snyk's Fix PR service](https://support.snyk.io/hc/en-us/articles/360011484018-Fixing-vulnerabilities).

To enable patches in your Fix PRs:

- Visit https://app.snyk.io
- Go to "Org Settings" > "Integrations"
- Choose "Edit Settings" under your SCM integration.
- Under the "Fix Pull Request" section, ensure patches are enabled.

Snyk will now include patches as part of its Fix PRs for your project.

## How it works

If there's a patch available for a vulnerability in your project, the Fix PR:

- Adds a `patch` entry to your `.snyk` file.
- Adds `@snyk/protect` to your `package.json`'s dependencies.
- Adds `@snyk/protect` to your `package.json`'s [`prepare` script](https://docs.npmjs.com/cli/v7/using-npm/scripts).

```patch
 {
   "name": "my-project",
   "scripts": {
+    "prepare": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "dependencies": {
+    "@snyk/protect": "^1.657.0"
   }
 }
```

Now after you run npm install, @snyk/protect will automatically download each patch configured in your .snyk file and apply them to your installed dependencies.

## Migrating from `snyk protect` to `@snyk/protect`

`@snyk/protect` is a standalone replacement for `snyk protect`. They both do the same job, however:

- `@snyk/protect` has zero dependencies.
- You don't need to include `snyk` in your dependencies (which is a much larger package with many dependencies).

If you already have Snyk Protect set up, you can migrate to `@snyk/protect` by applying the following changes to your `package.json`:

```patch
 {
   "name": "my-project",
   "scripts": {
     "prepare": "npm run snyk-protect",
-    "snyk-protect": "snyk protect"
+    "snyk-protect": "snyk-protect"
   },
   "dependencies": {
-    "snyk": "^1.500.0"
+    "@snyk/protect": "^1.657.0"
   }
 }
```

We have also created the [@snyk/cli-protect-upgrade](https://www.npmjs.com/package/@snyk/cli-protect-upgrade) npx script which you can use to update your project automatically. To use it, `cd` to the location containing the package.json to be updated and run:

```
npx @snyk/cli-protect-upgrade
```

---

Made with 💜 by Snyk
npm package: @snyk/rpm-parser
Description: Produce a list of dependencies from an RPM database file.
Author: snyk.io
Latest version: 3.4.1

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)

***

![Known Vulnerabilities](https://snyk.io/test/github/snyk/rpm-parser/badge.svg)

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part of your CI (Build) system.

## Snyk RPM Parser ##

A library that reads the list of packages inside an RPM database file.

### How to use the parser ###

```js
import { getPackages } from '@snyk/rpm-parser';
import { readFileSync } from 'fs';

// ...

const rpmDatabase = readFileSync('/var/lib/rpm/Packages');
const result = await getPackages(rpmDatabase);

console.log(result.response);
```

### Limitations ###

The parser currently reads only BerkeleyDB version 5.x as the supported database backend. There are plans within RPM to use SQLite as the database backend but the parser currently does not work with SQLite.

### Bugs or issues ###

Please file an [Issue](https://github.com/snyk/rpm-parser/issues) under this repository, providing as much information as you can to reproduce the issue.

If possible, provide the RPM database file (`/var/lib/rpm/Packages`) or the Operating System used and the packaged installed using the package manager.

### How the parser works ###

Refer to the [BerkeleyDB module README](https://github.com/snyk/rpm-parser/blob/master/lib/berkeleydb/README.md) for a breakdown of the BerkeleyDB version 5.x database.

Refer to the [RPM module README](https://github.com/snyk/rpm-parser/blob/master/lib/rpm/README.md) for details on the package extraction.
npm package: @snyk/ruby-semver
Description: node-semver compatible API with RubyGems semantics
Author: Gareth Visagie
Latest version: 4.2.0

[![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)](https://snyk.io)

[![Build Status](https://travis-ci.org/Snyk/ruby-semver.svg?branch=master)](https://travis-ci.org/Snyk/ruby-semver)
[![Known Vulnerabilities](https://snyk.io/test/github/snyk/ruby-semver/badge.svg)](https://snyk.io/test/github/snyk/ruby-semver)

***

# ruby-semver

A semver parser that uses RubyGem's semantics with node-semver's api.

### License

[License: Apache License, Version 2.0](LICENSE)
npm package: @snyk/snyk-cocoapods-plugin
Description: Snyk CLI CocoaPods plugin
Author: snyk.io
Latest version: 3.1.0

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)

***

[![Known Vulnerabilities](https://snyk.io/test/github/snyk/snyk-cocoapods-plugin/badge.svg)](https://snyk.io/test/github/snyk/snyk-cocoapods-plugin)

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part
of your CI (Build) system.

| :information_source: This repository is only a plugin to be used with the Snyk CLI tool. To use this plugin to test and fix vulnerabilities in your project, install the Snyk CLI tool first. Head over to [snyk.io](https://github.com/snyk/snyk) to get started. |
|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|

## Snyk snyk-cocoapods-plugin

Snyk CLI CocoaPods plugin
npm package: @snyk/snyk-docker-pull
Description: CLI-less docker pull
Author: snyk.io
Latest version: 3.15.1

# snyk/snyk-docker-pull

A library that pulls container images.

## API

| Function              | Description                                  |
| --------------------- | -------------------------------------------- |
| new DockerPull().pull | Downloads an image from a Container Registry |

## Tests

### Infrastructure

| Container Registry      | How to access                                                                                      |
| ----------------------- | -------------------------------------------------------------------------------------------------- |
| Docker Hub (docker-hub) | [DockerHub](https://hub.docker.com/), then 1Password: `Development > Okta - team magma Docker Hub` |

### Local

Set up your local env with the following env vars (see 1Password):

```
export SNYK_DRA_AZURE_USERNAME=snykgoof
export SNYK_DRA_AZURE_PASSWORD=<See 1password: Development/Azure Container Registry (ACR) - Docker Registry Agent>
export SNYK_DRA_AZURE_REPOSITORY=snykgoof/azure-goof
export SNYK_DRA_AZURE_REGISTRY_BASE=snykgoof.azurecr.io

export SNYK_DRA_DOCKER_HUB_USERNAME=snykgoof
export SNYK_DRA_DOCKER_HUB_PASSWORD=<See 1password: Development/DockerHub - snykgoof user>
export SNYK_DRA_DOCKER_HUB_REPOSITORY=snykgoof/dockerhub-goof
export SNYK_OCI_MULTI_ARCH_DOCKER_HUB_REPOSITORY=snykgoof/nodejs18
export SNYK_DRA_DOCKER_HUB_REGISTRY_BASE=registry-1.docker.io
```

To run the tests:

```console
$ npm run test
```

## Linting and formatting

> Note: Linting tasks are also run as part of the test run. However, due to
> their execution speed, it can be useful to run them as you develop, to keep
> your code organized.

To run the code formatting tasks:

```console
$ npm run format
```

To run the linting tasks:

```console
$ npm run lint
```
npm package: @snyk/snyk-hex-plugin
Description: Snyk Hex Plugin for Elixir ecosystem
Author: snyk.io
Latest version: 2.1.0

![Snyk logo](https://snyk.io/style/asset/logo/snyk-print.svg)

---

Snyk helps you find, fix and monitor for known vulnerabilities in your dependencies, both on an ad hoc basis and as part
of your CI (Build) system.

## Snyk Elixir's Mix Plugin

Given the `mix.exs` manifest and `mix.lock` lock files provided
by [Elixir's Mix build tool](https://elixir-lang.org/getting-started/mix-otp/introduction-to-mix.html), using
the [Snyk's Mix Parser](https://github.com/snyk/mix-parser), creates a [DepGraph](https://github.com/snyk/dep-graph)
object and return an Envelop's ScanResult object.

## Supported Node versions

| Node | Supported |
|------|-----------|
| 20   | ✅         |
| 22   | ✅         |
| 24   | ✅         |