rustsec 0.7.0-alpha2

Client library for the RustSec security advisory database
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

extern crate rustsec;
extern crate semver;

use rustsec::{AdvisoryDatabase, AdvisoryId, Lockfile, PackageName};
use semver::VersionReq;

// End-to-end integration test (has online dependency on GitHub)
#[test]
fn test_integration() {
    let db = AdvisoryDatabase::fetch().unwrap();
    let example_advisory_id = AdvisoryId::new("RUSTSEC-2017-0001").unwrap();
    let example_advisory = db.find(&example_advisory_id).unwrap();
    let example_package = PackageName::from("sodiumoxide");

    assert_eq!(example_advisory.id, example_advisory_id);
    assert_eq!(example_advisory.package, example_package);
    assert_eq!(
        example_advisory.patched_versions[0],
        VersionReq::parse(">= 0.0.14").unwrap()
    );
    assert_eq!(example_advisory.date.as_str(), "2017-01-26");
    assert_eq!(
        example_advisory.url.as_ref().unwrap(),
        "https://github.com/dnaq/sodiumoxide/issues/154"
    );
    assert_eq!(
        example_advisory.title,
        "scalarmult() vulnerable to degenerate public keys"
    );
    assert_eq!(
        &example_advisory.description[0..30],
        "The `scalarmult()` function in"
    );

    let ref crate_advisories = db.find_by_crate(example_package);
    assert_eq!(example_advisory, crate_advisories[0]);

    // TODO: test vulnerability finding code
    let lockfile = Lockfile::load("Cargo.lock").unwrap();
    let vulns = db.vulnerabilities(&lockfile);
    assert!(vulns.is_empty());
}