MMohamed505216 (Community Member) asked a question.

On the compilation guide for javascript it mentions to have software compilation analysis available and have veracode define third party libraries i need to include the package.json. older code bases have "packages.config" would that work?

  • sgibson (Veracode, Inc.)

    We use the package.json file to match against npm packages, and provide Software Composition Analysis on those packages. It looks like packages.config may be a file associated with NuGet, so that would not work for matching against node modules in npm.

  • Thank you @sgibson (Veracode, Inc.)​ for sharing your insights!

     

    Hi @MMohamed505216 (Community Member)​ , let me introduce @sgibson (Veracode, Inc.)​ a little bit. She is a Application Security Consultant at Veracode, working with customers like yourself on the toughest remediation challenges on a daily basis. I hope you find what she shared helpful. If so, would you mind selecting her post as the best answer (by clicking on "Select as Best" at the bottom of her comment)? This way, other Community members with similar challenges can also benefit from this thread. Thank you for visiting the Veracode Community. We look forward to working with you again!

    Expand Post

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.