What's Changed * Added generic cdxgen_args that can be passed as an environment variable or argument to depscan itself. by deleterepo in https://github.com/owasp-dep-scan/dep-scan/pull/292 * Update cdxgen to bring go purl compatibility fixes by prabhu in https://github.com/owasp-dep-scan/dep-scan/pull/297
From this release, deprecated packages would always get flagged regardless of the score with risk audit. For PyPI, we look for couple of strings in the description since not every vendor follows the procedure to `yank` the packages correctly.