aboutcode-org / aboutcode-org/vulnerablecode
Ensure improver reports a ghost package and a ghost package version differently
Open
- Dominant language
- Python
- Stars
- 702
- Forks
- 328
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 3
Description
We should ensure improver reports a ghost package and a ghost package version differently. These are very different events. A ghost package version is a job for PurlDB to check. A ghost package is a risk.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.