{"id":18835995,"url":"https://github.com/stevespringett/cpe-parser","last_synced_at":"2025-04-09T06:04:11.565Z","repository":{"id":32798927,"uuid":"140328620","full_name":"stevespringett/CPE-Parser","owner":"stevespringett","description":"A utility for validating and parsing Common Platform Enumeration (CPE) v2.2 and v2.3 as originally defined by MITRE and maintained by NIST","archived":false,"fork":false,"pushed_at":"2025-04-01T13:45:29.000Z","size":429,"stargazers_count":49,"open_issues_count":5,"forks_count":16,"subscribers_count":6,"default_branch":"master","last_synced_at":"2025-04-02T04:29:26.308Z","etag":null,"topics":["cpe","java","library","mitre","nist","nvd"],"latest_commit_sha":null,"homepage":null,"language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/stevespringett.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2018-07-09T18:47:25.000Z","updated_at":"2025-03-13T00:08:19.000Z","dependencies_parsed_at":"2025-01-19T22:06:24.372Z","dependency_job_id":"2dd22b92-47ea-4839-bf23-2ec4bb28e86e","html_url":"https://github.com/stevespringett/CPE-Parser","commit_stats":{"total_commits":186,"total_committers":6,"mean_commits":31.0,"dds":0.586021505376344,"last_synced_commit":"071cde87007df8d260e0804712acefe2cc2c5c35"},"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2FCPE-Parser","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2FCPE-Parser/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2FCPE-Parser/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stevespringett%2FCPE-Parser/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/stevespringett","download_url":"https://codeload.github.com/stevespringett/CPE-Parser/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247987184,"owners_count":21028891,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["cpe","java","library","mitre","nist","nvd"],"created_at":"2024-11-08T02:17:49.813Z","updated_at":"2025-04-09T06:04:11.515Z","avatar_url":"https://github.com/stevespringett.png","language":"Java","funding_links":[],"categories":[],"sub_categories":[],"readme":"[![Build Status](https://github.com/stevespringett/CPE-Parser/workflows/Maven%20CI/badge.svg)](https://github.com/stevespringett/CPE-Parser/actions?workflow=Maven+CI)\n[![Maven Central](https://maven-badges.herokuapp.com/maven-central/us.springett/cpe-parser/badge.svg)](https://maven-badges.herokuapp.com/maven-central/us.springett/cpe-parser)\n[![License](https://img.shields.io/badge/license-Apache%202.0-brightgreen.svg)][License]\n\n\nCPE Parser\n=========\n\nA utility for parsing, validating, and building Common Platform Enumeration (CPE)\nv2.2 and v2.3 as originally defined by MITRE and maintained by NIST.\n\nThe implementation's matching deviates slightly from the official matching \nspecification:\n- matching only returns true or false as opposed to set relations (DISJOINT, SUBSET, SUPERSET, EQUAL, UNDEFINED) specified in the [matching standard](https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7696.pdf).\n- `undefined` matches are mapped to either `true` or `false` based on the implementors best judgment; examples: \n  - `ANY` will match `NA` and return `true` instead of `undefined`\n  - `ANY` will match `m + wild cards` and return `true` instead of `undefined`\n  - `NA` will not match `m + wild cards` and return `false` instead of `undefined`\n  - `i` will match `m + wild cards` if `i` matches `m + wild cards` when `m + wild cards` is evalauted as text instead of processing the `wild cards`.\n  - `m1 + wild cards` will match `m2 + wild cards` if the expression `m1 + wild cards` matches `m2 + wild cards` when `m2 + wild cards` is treated as text instead of process the `wild cards`\n\n\nMaven Usage\n-------------------\n\n```xml\n\u003cdependency\u003e\n    \u003cgroupId\u003eus.springett\u003c/groupId\u003e\n    \u003cartifactId\u003ecpe-parser\u003c/artifactId\u003e\n    \u003cversion\u003e3.0.0\u003c/version\u003e\n\u003c/dependency\u003e\n```\n\nExample Usage\n-------------------\n\n```java\nCpeBuilder builder = new CpeBuilder();\nCpe apache = builder.part(Part.APPLICATION).vendor(\"apache\").build();\n\nCpe parsed = CpeParser.parse(\"cpe:2.3:a:apache:commons-text:1.6:*:*:*:*:*:*:*\");\n\nif (apache.matches(parsed)) {\n    System.out.println(\"Parsed CPE value is an application CPE for the vendor 'apache'\");\n}\n```\n\n\nCopyright \u0026 License\n-------------------\n\nCPE Parser is Copyright (c) Steve Springett. All Rights Reserved.\n\nPermission to modify and redistribute is granted under the terms of the \nApache 2.0 license. See the [LICENSE] file for the full license.\n\n[License]: https://github.com/stevespringett/CPE-Parser/blob/master/LICENSE\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstevespringett%2Fcpe-parser","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstevespringett%2Fcpe-parser","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstevespringett%2Fcpe-parser/lists"}