PHP
PHP package analysis and vulnerability scanning capabilities
Package analysis
| Cataloger + Evidence | Package URL Type | License | Dependencies | Package Manager Claims | ||||
|---|---|---|---|---|---|---|---|---|
| Depth | Edges | Kinds | Files | Digests | Integrity Hash | |||
php-composer-installed-cataloger installed.json | pkg:composer | Transitive | Runtime, Dev | |||||
php-composer-lock-cataloger composer.lock | pkg:composer | Transitive | Runtime | |||||
php-interpreter-cataloger php*, php*/**/*.so, php-fpm*, apache*/**/libphp*.so | Direct | Flat | Runtime | |||||
php-pear-serialized-cataloger php/.registry/**/*.reg | pkg:pear | Direct | Runtime | |||||
php-pecl-serialized-cataloger deprecated php/.registry/.channel.*/*.reg | pkg:pear | Direct | Runtime | |||||
Vulnerability scanning
| Data Source | Disclosures | Fixes | Track by Source Package | ||
|---|---|---|---|---|---|
| Affected | Date | Versions | Date | ||
| National Vulnerability Database (NVD) | |||||
Grype Configuration
| Configuration Key | Description |
|---|---|
match.stock.using-cpes | Use CPE package identifiers to find vulnerabilities |