Integrate blint as an extension (#399)

* Adds blint and atom-tools as an extension

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

* Update blint version

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

---------

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>

Author: prabhu

README.md

@@ -85,7 +85,7 @@ sudo npm install -g @cyclonedx/cdxgen
 # Normal version recommended for most users (MIT)
 pip install owasp-depscan
 
-# For a performant version, that uses valkey cache during risk audit (BSD-3-Clause)
+# For a full version with all extensions and server mode (Multiple Licenses)
 pip install owasp-depscan[all]
 ```
 

depscan/cli.py

@@ -16,7 +16,7 @@
 from vdb.lib import config, db6 as db_lib
 from vdb.lib.utils import parse_purl
 from depscan import get_version
-from depscan.lib import explainer, github, utils
+from depscan.lib import explainer, utils
 from depscan.lib.analysis import (
     PrepareVdrOptions,
     analyse_licenses,

depscan/lib/analysis.py

@@ -397,7 +397,6 @@ def generate_console_output(pkg_vulnerabilities, bom_dependency_tree, include_pk
 
 
 def output_results(counts, direct_purls, options, pkg_group_rows, pkg_vulnerabilities, reached_purls, table):
-    json_dump("pkg_vulnerabilities.json", pkg_vulnerabilities, True, log=LOG)
     if pkg_vulnerabilities:
         console.print()
         console.print(table)

pyproject.toml

@@ -7,16 +7,15 @@ authors = [
 ]
 dependencies = [
     "appthreat-vulnerability-db[oras]",
-    "custom-json-diff",
-    "defusedxml",
-    "PyYAML",
-    "rich",
-    "PyGithub",
-    "toml",
-    "pdfkit",
-    "Jinja2",
-    "packageurl-python",
-    "cvss",
+    "custom-json-diff>=2.1.5",
+    "defusedxml>=0.7.1",
+    "PyYAML>=6.0.2",
+    "rich>=13.9.4",
+    "toml>=0.10.2",
+    "pdfkit>=1.0.0",
+    "Jinja2>=3.1.5",
+    "packageurl-python>=0.16.0",
+    "cvss>=3.4",
 ]
 
 requires-python = ">=3.10"
@@ -46,15 +45,17 @@ depscan = "depscan.cli:main"
 scan = "depscan.cli:main"
 
 [project.optional-dependencies]
-dev = ["black",
-    "flake8",
-    "pytest",
-    "pytest-cov",
-    "httpretty"
+dev = [
+    "black>=25.1.0",
+    "flake8>=7.1.2",
+    "pytest>=8.3.4",
+    "pytest-cov>=6.0.0",
+    "httpretty>=1.1.4"
 ]
-server = ["quart"]
-perf = ["hishel[redis]"]
-all = ["quart", "hishel[redis]"]
+server = ["quart>=0.20.0"]
+ext = ["atom-tools>=0.7.1", "blint"]
+perf = ["hishel[redis]>=0.1.1"]
+all = ["atom-tools>=0.7.1", "blint", "quart>=0.20.0", "PyGithub>=2.6.1", "hishel[redis]>=0.1.1"]
 
 [build-system]
 requires = ["setuptools>=61", "wheel"]
@@ -77,4 +78,5 @@ select = "B,C,E,F,W,T4,B9"
 line-length = 99
 
 [tool.uv.sources]
-appthreat-vulnerability-db = { git = "https://github.com/appthreat/vulnerability-db", rev = "f693bfb7e16e0dcf419cdf6cddc34ed5f3373b56" }
+appthreat-vulnerability-db = { git = "https://github.com/appthreat/vulnerability-db", rev = "ba88de9194bde83b23d31c2b48a72c60d0ca1944" }
+blint = { git = "https://github.com/owasp-dep-scan/blint", rev = "79f28886d64d568aa789195ced64489ed3232406" }