public void GetDirectReferencesWithSingleDependency()
{
var lockFile = new MockFileService("SingleTarget").ReadLockFiles().FirstOrDefault();
var references = _assetsFileParser.GetNugetReferences(lockFile);
Assert.Single(references);
Assert.Equal("Libuv", references.First().Id);
Assert.Equal("1.9.1", references.First().Version);
Assert.Single(references.First().Dependencies);
Assert.Equal("Microsoft.NETCore.Platforms", references.First().Dependencies.First().Id);
Assert.Equal("1.0.1", references.First().Dependencies.First().Version);
}
public void GetDirectReferenceWithMultipleDependencies()
{
var lockFile = new MockFileService("SingleTarget-MultipleDependencies").ReadLockFiles().FirstOrDefault();
var references = _assetsFileParser.GetNugetReferences(lockFile);
Assert.Single(references);
Assert.Equal("Newtonsoft.Json", references.First().Id);
Assert.Equal("10.0.2", references.First().Version);
Assert.Equal(6, references.First().Dependencies.Count);
Assert.Equal("Microsoft.CSharp", references.First().Dependencies.First().Id);
Assert.Equal("4.3.0", references.First().Dependencies.First().Version);
Assert.Equal("System.Xml.XmlDocument", references.First().Dependencies.Last().Id);
Assert.Equal("4.3.0", references.First().Dependencies.Last().Version);
}
public void GetVulnerableDapperButWithManuallyUpdateSystemNetSecurity()
{
var lockFile = new MockFileService("SingleTarget.ManuallyFixedUpgrade").ReadLockFiles().FirstOrDefault();
var references = _assetsFileParser.GetNugetReferences(lockFile).ToArray();
Assert.Equal(3, references.Count());
Assert.Equal("Dapper", references[0].Id);
Assert.Equal("1.50.2", references[0].Version);
Assert.Equal(18, references[0].Dependencies.Count);
Assert.Equal("System.Data.SqlClient", references[1].Id);
Assert.Equal("4.1.0", references[1].Version);
Assert.Equal("System.Net.Security", references[2].Id);
Assert.Equal("4.3.1", references[2].Version);
}
