aboutcode-org / aboutcode-org/vulnerablecode

Single purl lookup on `packages` endpoint can take up to 20 seconds

Open
#1,218 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

For example a call on `https://public.vulnerablecode.io/api/packages/` with the following payload: `{'purl': 'pkg:alpine/libxml2@2.9.8-r1'}`

```
from scanpipe.pipes import vulnerablecode
from timeit import default_timer as timer

start_time = timer()
vulnerabilities = vulnerablecode.get_vulnerabilities_by_purl("pkg:alpine/libxml2@2.9.8-r4")
print(timer() - start_time)
# -> 19.21
```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.