ThreatWorx Vuln Checker provides a preview of the rich machine curated intelligence and for ThreatWorx subscribers also allows to track exposure to vulnerabilities brought in by libraries consumed by your projects. Additionally, ThreatWorx also allows you to carry out obsolete version checks, license compliance checks and static and dynamic anaylysis checks and the extension allows you to pull all of that information as you are developing new code ( on-demand ).
The following properties need to be set for using the extension:
"twinstance" : Your ThreatWorx instance OR https://threatworx.io for SaaS consumers.
"twtoken" : You API token, which can be retreived once you have a ThreatWorx account.
"twhandle" : Your email address that also serves as your user id.
"twrecordlimit" : The number of records that the extension should pull.
Initial release of ThreatWorx extension.