aboutcode-org / aboutcode-org/vulnerablecode

``AffectedPackage`` as model

Open
#727 0 comments 0 reactions 0 assignees View on GitHub
3-next Priority: high
Dominant language
Python
Stars
702
Forks
328
Avg merge
3d 8h
Merged PRs (30d)
3

Description

We are missing crucial information contained inside ``AffectedPackage`` in ``Advisory`` model. We might need a model specifically for ``AffectedPackage`` so that we may create relations to vulnerabilities and possibly packages based on version ranges.

_(via: https://github.com/nexB/vulnerablecode/wiki/WeeklyMeetings#meeting-on-tuesday-2022-05-03-at-1000-utc)_

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.