aboutcode-org / aboutcode-org/vulnerablecode

Plans to make V3 API more efficient

未關閉
#2,271 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
主要語言
Python
星號
702
分支
328
平均合併
3 天 8 小時
30 天內合併 PR
3

描述

So V3 had some caveats that V1 didn't, like multiple advisories instead of single vulnerability

And also one advisory does not have a direct relation with package, instead it have impacts as an intermediary table
Which relates to actual implementation of an advisory.

Earlier one vuln had many packages affected

Now one advisory has impacts and every impact has many packages affected

Earlier the idea was to send every single advisory on the package and that implementation was quicker than V1. But then we had to start grouping and also making data more presentable like striping “/“s and giving last part of advisory ID as an identifier and removing that identifier from aliases. These things are additional ops done per advisory group on the serializer

貢獻指南

這個儲存庫沒有索引到貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。