G-Rath / G-Rath/osv-detector

Support checking if things are approaching EOL with endoflife.date

Open
#75 0 comments 0 reactions 0 assignees View on GitHub
question
Dominant language
Go
Stars
63
Forks
9
PR merge metrics
No merged PRs in 30d

Description

https://endoflife.date/ provides a bunch of EOL dates, maintained by the general community and it has an api!

In theory, we could use this with `osv-detector`: since it knows the packages being used, we could try and see if any of them are in the array returned by `https://endoflife.date/api/all.json`.

In theory again, we could also attempt to pick up versions for other tools from known files, e.g. we could look for `.-version` files and assume they're `.ruby-version`, `.node-version`, etc.

(also for Ruby, we could use the ruby version that gets recorded in the `Gemfile.lock` too)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.