Tushar Goel

Follow up of #662

Please add an issue to improve this to support and validate many URL styles correctly (including testing the prefix is correct like in GHSA, or CVE, etc.) _Originally posted by...

vulnerabilities starting with something else may not be public yet see for instance https://web.archive.org/web/20201215213725/https://security-tracker.debian.org/tracker/TEMP-0000000-A2EB44

Add package_releases in packagedata model

1

Signed-off-by: Tushar Goel Add package_releases in packagedata model to have more than one downloadable url per package

Unable to get name, version, extension from get_sdist_name_ver_ext in utils_thirdparty.py

1

### Description > Unable to get name, version, extension from get_sdist_name_ver_ext in utils_thirdparty.py ### How To Reproduce ``` >>> from utils_thirdparty import * >>> get_sdist_name_ver_ext("functools32-3.2.3-2.zip") ``` https://pypi.org/simple/functools32/ ### System configuration...

Add contact info for getting API keys

Add Improver to find out Ghost packages

2

We have some packages coming from security advisories that doesn't exist anywhere, we should have an improver to verify if a package actually exists.

Remove duplicate fields from API that have same data

2

currently `reference_url` and `url` have same data and `unresolved_vulnerabilities` and `affected_by_vulnerabilities` have same data. We need to drop one of these for both before release