JarCasting
JarCasting JarCasting

CPE Parser

A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.

License

License
GroupId

GroupId

us.springett
ArtifactId

ArtifactId

cpe-parser
Last Version

Last Version

2.0.2
Release Date

Release Date
Type

Type

jar
Description

Description

CPE Parser
A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.
Project URL

Project URL

https://github.com/stevespringett/CPE-Parser
Source Code Management

Source Code Management

https://github.com/stevespringett/CPE-Parser.git

Download cpe-parser

Filename Size
cpe-parser-2.0.2.pom
cpe-parser-2.0.2.jar 29 KB
cpe-parser-2.0.2-sources.jar 30 KB
cpe-parser-2.0.2-javadoc.jar 129 KB
Browse

How to add to project

<!-- https://jarcasting.com/artifacts/us.springett/cpe-parser/ -->
<dependency>
    <groupId>us.springett</groupId>
    <artifactId>cpe-parser</artifactId>
    <version>2.0.2</version>
</dependency>
// https://jarcasting.com/artifacts/us.springett/cpe-parser/
implementation 'us.springett:cpe-parser:2.0.2'
// https://jarcasting.com/artifacts/us.springett/cpe-parser/
implementation ("us.springett:cpe-parser:2.0.2")
'us.springett:cpe-parser:jar:2.0.2'
<dependency org="us.springett" name="cpe-parser" rev="2.0.2">
  <artifact name="cpe-parser" type="jar" />
</dependency>
@Grapes(
@Grab(group='us.springett', module='cpe-parser', version='2.0.2')
)
libraryDependencies += "us.springett" % "cpe-parser" % "2.0.2"
[us.springett/cpe-parser "2.0.2"]

Dependencies

compile (1)

Group / Artifact Type Version
org.slf4j : slf4j-api jar 1.7.30

test (2)

Group / Artifact Type Version
junit : junit jar 4.13
ch.qos.logback : logback-classic jar 1.2.3

Project Modules

There are no modules declared in this project.

Build Status Maven Central License

CPE Parser

A utility for parsing, validating, and building Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST.

The implementation's matching deviates slightly from the official matching specification:

  • matching only returns true or false as opposed to set relations (DISJOINT, SUBSET, SUPERSET, EQUAL, UNDEFINED) specified in the matching standard.
  • undefined matches are mapped to either true or false based on the implementors best judgment; examples:
    • ANY will match NA and return true instead of undefined
    • ANY will match m + wild cards and return true instead of undefined
    • NA will not match m + wild cards and return false instead of undefined
    • i will match m + wild cards if i matches m + wild cards when m + wild cards is evalauted as text instead of processing the wild cards.
    • m1 + wild cards will match m2 + wild cards if the expression m1 + wild cards matches m2 + wild cards when m2 + wild cards is treated as text instead of process the wild cards

Maven Usage

<dependency>
    <groupId>us.springett</groupId>
    <artifactId>cpe-parser</artifactId>
    <version>2.0.2</version>
</dependency>

Example Usage

CpeBuilder builder = new CpeBuilder();
Cpe apache = builder.part(Part.APPLICATION).vendor("apache").build();

Cpe parsed = CpeParser.parse("cpe:2.3:a:apache:commons-text:1.6:*:*:*:*:*:*:*");

if (apache.matches(parsed)) {
    System.out.println("Parsed CPE value is an application CPE for the vendor 'apache'");
}

Copyright & License

CPE Parser is Copyright (c) Steve Springett. All Rights Reserved.

Permission to modify and redistribute is granted under the terms of the Apache 2.0 license. See the LICENSE file for the full license.

Versions

Version
2.0.2
2.0.1
2.0.0
1.0.0