The plugin will create a new panel in your IDE called "Nexus IQ". It will automatically evaluate your components.
Currently it is limited to analyzing NPM projects.
Under the covers it does
Looks for a package.json
Performs a npm shrinkwrap
Submits an evaluation report to NexusIQ for the identified components
Creates a new panel called Nexus IQ in your VS Code Explorer.
Displays the components in the Nexus IQ PANEL
View Details by clicking on the pencil.
Component Info Panel
You will need a Sonatype Nexus IQ Lifecycle License to be able to use this extension.
Configuration is done in the VSCode Preferences > Settings
Filter for NexusIQ and then make your changes
This extension contributes the following settings, all are required:
nexusiq.npm.url: URL including port of the Nexus IQ server
nexusiq.npm.username: Your Nexus IQ user name
nexusiq.npm.password: Your Nexus IQ Internal ApplicationId
nexusiq.npm.applicationId: Your Nexus IQ Internal ApplicationId
nexusiq.npm.applicationPublicId: Your Nexus IQ Application Public Id
You have to specify the Application Public Id and Application Internal UUID, this is a pain. I will create a GUI for this when I get to it. For now you have to work out your UUID. Call this end point to find the UUID - /api/v2/applications.