Download
A tool for checking for lingering free namespaces for private package names referenced in dependency configuration for Python (pypi) requirements.txt, JavaScript (npm) package.json, PHP (composer) composer.json or MVN (maven) pom.xml. confused simply reads through a dependency definition file of an application and checks the public package repositories for each dependency entry in that file. It will proceed to report all the package names that are not found in the public repositories - a state that implies that a package might be vulnerable to this kind of attack, while this vector has not yet been exploited.
Features
- Documentation available
- Examples available
- Easy to use
- Check for dependency confusion vulnerabilities
- Multiple package management systems
Project Samples
Categories
SecurityLicense
MIT LicenseFollow Confused
Other Useful Business Software
Field Service+ for MS Dynamics 365 & Salesforce
Resco’s mobile solution streamlines your field service operations with offline work, fast data sync, and powerful tools for frontline workers, all natively integrated into Dynamics 365 and Salesforce.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of Confused!
