aboutcode-org / aboutcode-org/vulnerablecode

Plans to make V3 API more efficient

未关闭
#2,271 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
主要语言
Python
星标
702
派生
328
平均合并
3 天 8 小时
30 天内合并 PR
3

描述

So V3 had some caveats that V1 didn't, like multiple advisories instead of single vulnerability

And also one advisory does not have a direct relation with package, instead it have impacts as an intermediary table
Which relates to actual implementation of an advisory.

Earlier one vuln had many packages affected

Now one advisory has impacts and every impact has many packages affected

Earlier the idea was to send every single advisory on the package and that implementation was quicker than V1. But then we had to start grouping and also making data more presentable like striping “/“s and giving last part of advisory ID as an identifier and removing that identifier from aliases. These things are additional ops done per advisory group on the serializer

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。