Bump dependencies in setup.cfg

Signed-off-by: Tushar Goel <tushar.goel.dav@gmail.com>

Author: TG1999

requirements.txt

@@ -106,11 +106,11 @@ toml==0.10.2
 tomli==2.0.1
 traitlets==5.1.1
 typing_extensions==4.1.1
-univers==30.7.0
+univers==30.9.0
 urllib3==1.26.9
 wcwidth==0.2.5
 websocket-client==0.59.0
 yarl==1.7.2
 zipp==3.8.0
 dateparser==1.1.1
-fetchcode==0.1.0
+fetchcode==0.2.0

setup.cfg

@@ -82,7 +82,7 @@ install_requires =
     # networking
     GitPython>=3.1.17
     requests>=2.25.1
-    fetchcode>=0.1.0
+    fetchcode>=0.2.0
 
 [options.extras_require]
 dev =

vulnerabilities/importers/npm.py

@@ -57,21 +57,21 @@ def to_advisory_data(self, file: Path) -> AdvisoryData:
         cvss_vector = data.get("cvss_vector")
         cvss_score = data.get("cvss_score")
         severities = []
-        if cvss_vector.startswith("CVSS:3.0/"):
+        if cvss_vector and cvss_vector.startswith("CVSS:3.0/"):
             severities.append(
                 VulnerabilitySeverity(
                     system=CVSSV3,
-                    score=cvss_score,
+                    value=cvss_score,
                 )
             )
-        if cvss_vector.startswith("CVSS:2.0/"):
+        if cvss_vector and cvss_vector.startswith("CVSS:2.0/"):
             severities.append(
                 VulnerabilitySeverity(
                     system=CVSSV2,
-                    score=cvss_score,
+                    value=cvss_score,
                 )
             )
-        for ref in data.get("references", []):
+        for ref in data.get("references") or []:
             references.append(
                 Reference(
                     url=ref,
@@ -84,7 +84,7 @@ def to_advisory_data(self, file: Path) -> AdvisoryData:
             vulnerable_range = data.get("vulnerable_versions")
             affected_packages.append(
                 AffectedPackage(
-                    package_url=PackageURL(
+                    package=PackageURL(
                         type="npm",
                         name=package_name,
                     ),
@@ -93,6 +93,13 @@ def to_advisory_data(self, file: Path) -> AdvisoryData:
                 )
             )
         for alias in data.get("cves", []):
+            print(AdvisoryData(
+                summary=build_description(summary=summary, description=description),
+                references=references,
+                date_published=date_published,
+                affected_packages=affected_packages,
+                aliases=[alias],
+            ))
             yield AdvisoryData(
                 summary=build_description(summary=summary, description=description),
                 references=references,