dependency-check / dependency-check/DependencyCheck
Summary Vs Finding confidence level mismatch - PEBKAC ?
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
Hi @jeremylong
### I find there is a Confidence mismatch between the "findings summary list" and the "individual findings"?
For example; in the report image below, we see in the summary for`socket.io-parser:4.0.4`having no confidence value :
---
---
..then going to the individual finding, the confidence is “Highest” ???
---
---
**Is this a parameter setting, an error, or something else? eg user error** 🙂
Also, this tool is fantastic, and I really appreciate the effort you make with it. 🏅
Warm regards
Contributor guide
Assessment
This issue has not been assessed yet.