v0.22.0

What's New

Added

• Added ComponentsClient SDK with gRPC and HTTP client implementations
• Added components CLI command for component scanning functionality

Changed

• Removed api prefix from dependency and vulnerability API URLs
• Replaced gRPC client by HTTP client on cryptography scanner
• Implemented client config on dependency HTTP client
• Implemented client config on vulnerability HTTP client

v0.21.1

What's New

Changed

• Added compatibility across all scanner configurations

v0.21.0

What's New

Added

• Implemented parser for package-lock.json v1 files.

v0.20.0

What's New

Added

• Added vulnerability scanner to SDK with HTTP client support
• Implemented vulnerabilitiesComponentes method for batch vulnerability scanning of multiple components
• Implemented vulnerabilitiesComponent method for single component vulnerability assessment

v0.19.0

What's New

Changed

• Removed api prefix from dependency and vulnerability API URLs

Fixed

• Fixed license field mapping for dependency responses (spdx_id, is_spdx_approved)

v0.18.0

What's New

Added

• Added REST protocol implementation for SCANOSS dependency service
• Added proxy options to dep subcommand

Fixed

• Improved URL path handling for free vs premium SCANOSS endpoints

Changed

• Added gRPC and REST clients

Full Changelog: v0.17.3...v0.18.0

v0.17.3

What's Changed

Fixed

• Empty winnowing.wfp file now created when scanning empty directories or filtered content

v0.17.2

What's Changed

Fixed

• Fixed dependency scan response concatenation

v0.17.1

What's Changed

Chunk dependency requests

Full Changelog: v0.17.0...v0.17.1

v0.17.0

V0.17.0

Fixed

• Fixed ca-certificates for gRPC protocol

Changed

• Improved scanner config validation