Method, device and system for checking security of software package

• Main Authors: SHEN CUNJING, ZHAO TONG, LIU CHAOQIAN, DONG JUNFENG, QIANG QUNLI
• Format: Patent
• Language: Chinese; English
• Published: 21.03.2023
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC DIGITAL DATA PROCESSING; PHYSICS

The invention discloses a software package security verification method, device and system, and the method is executed by a verification platform, and comprises the steps: receiving a verification request, and obtaining a code corresponding to the verification request; generating a software package dependency tree file of the code according to the code; and according to the software package dependency tree file and a preset software package blacklist, determining a checking result of the target project. According to the method and the device, the software package with the problem can be checked and controlled from an introduction source, the introduction of the software package with the problem is blocked, and the labor cost, the time cost and the economic cost required for checking the security of the software package are reduced to a great extent; and the accuracy of security verification of the software package is improved. 本申请公开了一种软件包安全性的核查方法、装置及系统，其方法由核查平台执行，包括：接收核查请求，并获取与所述核查请求对应的代码；根据所述代码，生成所述代码的软件包依赖树