aboutcode-org / aboutcode-org/vulnerablecode

Uniform method to categorize versions

Open
#494 2 comments 0 reactions 1 assignee Claimed by @TG1999 View on GitHub
debt import-improver-migration
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

A function to categorize versions into affected and safe versions is present in multiple importers such as
https://github.com/nexB/vulnerablecode/blob/e9943b014f5f07b970988f910b2aaebcec0a6e58/vulnerabilities/importers/github.py#L320-L338

https://github.com/nexB/vulnerablecode/blob/e9943b014f5f07b970988f910b2aaebcec0a6e58/vulnerabilities/importers/apache_httpd.py#L129-L148

https://github.com/nexB/vulnerablecode/blob/e9943b014f5f07b970988f910b2aaebcec0a6e58/vulnerabilities/importers/istio.py#L66-L83

They are present with different names and sometimes even with different parameters. This is confusing and hard to document.
Imo, we should create an abstract method in the `DataSource` class with a uniform name and parameters. This would also help me build the small documentation I'm working on for vulnerablecode better.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.