aboutcode-org / aboutcode-org/vulnerablecode

Get NuGet package versions from federated PURL version data in https://github.com/aboutcode-data/

Open
#2,418 1 comment 0 reactions 0 assignees View on GitHub
bug data-quality
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

Fetchcode returns no version for `pkg:nuget/Microsoft.WindowsDesktop.App.Runtime.win-arm64`, but we have all the versions for this package in https://github.com/aboutcode-data/purls-nuget-0128/blob/main/nuget-0182/Microsoft.WindowsDesktop.App.Runtime.win-arm64/purls.yml.

```python
In [13]: from fetchcode.package_versions import versions

In [14]: list(versions("pkg:nuget/Microsoft.WindowsDesktop.App.Runtime.win-arm64"))
Out[14]: []
```


This issue impacts our ability to unfurl NuGet versions and flag ghost NuGet packages.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.