dependency-check-core/src/main/java/org/owasp/dependencycheck/analyzer/DependencyBundlingAnalyzer.java
/**
     * Bundling Ruby gems that are identified from different .gemspec files but
     * denote the same package path. This happens when Ruby bundler installs an
     * application's dependencies by running "bundle install".
     *
     * @param dependency1 dependency to compare
     * @param dependency2 dependency to compare
     * @return true if the the dependencies being analyzed appear to be the
     * same; otherwise false
     */
Bundling Ruby gems that are identified from different .gemspec files but
denote the same package path. This happens when Ruby bundler installs an
application's dependencies by running "bundle install".

@param dependency1 dependency to compare
@param dependency2 dependency to compare
@return true if the the dependencies being analyzed appear to be the
same; otherwise false
Bundling Ruby gems that are identified from different . gemspec files but denote the same package path . This happens when Ruby bundler installs an application ' s dependencies by running " bundle install " . @param dependency1 dependency to compare @param dependency2 dependency to compare @return true if the the dependencies being analyzed appear to be the same ; otherwise false
private boolean isSameRubyGem(Dependency dependency1, Dependency dependency2) {
        if (dependency1 == null || dependency2 == null
                || !dependency1.getFileName().endsWith(".gemspec")
                || !dependency2.getFileName().endsWith(".gemspec")
                || dependency1.getPackagePath() == null
                || dependency2.getPackagePath() == null) {
            return false;
        }
        return dependency1.getPackagePath().equalsIgnoreCase(dependency2.getPackagePath());
    }
private boolean isSameRubyGem ( Dependency dependency1 , Dependency dependency2 ) { if ( dependency1 == null || dependency2 == null || ! dependency1 . getFileName ( ) . endsWith ( ".gemspec" ) || ! dependency2 . getFileName ( ) . endsWith ( ".gemspec" ) || dependency1 . getPackagePath ( ) == null || dependency2 . getPackagePath ( ) == null ) { return false ; } return dependency1 . getPackagePath ( ) . equalsIgnoreCase ( dependency2 . getPackagePath ( ) ) ; }
Bundling Ruby gems that are identified from different .gemspec files but
 denote the same package path.
Bundling Ruby gems that are identified from different . gemspec files but denote the same package path .