DependencyTrack / DependencyTrack/dependency-track
different enhacements possible
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
The enhancement may already be reported! Please search for the enhancement before creating one.
### Current Behavior:
1- components page empty, until search.
2- vulnerabilities order in the vulnerabilities page.
3- alerts mail list have to be written by hand.
4- uploading a BOM deletes every component that already exsits.
5- show inactive projects button have to be activated each time you come back to the projects page.
### Proposed Behavior:
1- show all components and filter by search, like the projects page.
2- order vulnerabilities by severity or the number of affected projects in the vulnerabilities page.
3- get the mails from the users mapped to the project associated with the alert.
4- auto merge the exsisting components with the new BOM.
5- once the button activated it should stay like that until deactivated.
what would be an amazing update is to propose CPEs, SWIDs, PURLs when trying to add a component. like the user can type in the input and it will give suggetions. i know that it would need more database tables, storage and getting all CPEs that exsist, but sometimes it is hard for normal users to find the right CPE of a component.
Contributor guide
Assessment
This issue has not been assessed yet.