haskell / haskell/security-advisories
SPDX support for SBOM
Open
good first issue
- Dominant language
- Haskell
- Stars
- 64
- Forks
- 27
- Avg merge
- 3h 39m
- Merged PRs (30d)
- 1
Description
## Summary
Support generating SPDX manifests and check them with the advisories database?
Contributor guide
Research direction
No files, tests, or entry points are identified. Start by clarifying how SPDX manifests should be generated and how they should be checked against the advisories database; done means both operations are supported with an agreed SPDX format and verification behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- haskell
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Quiet
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100