Hans Aikema

First draft implementation is nearing completion, expect to push the branch as a work-in-progress today, need to see whether I also manage to incorporate setting of the configurable parts (download...

@jeremylong feel free to already comment on my initial implementation. The pending work is adding configurability of the flags added to the Settings to the various integrations and extending the...

> The only other thing I might question is the use of the cached data source directly in the analyzer You'd rather see it operate on a copy of the...

Has been resolved by OSSINDEX

@cmuchinsky Fully agree on the FP, but did you also spot that the library is deprecated for removal and advertises to change to using the Jsoup provided W3CDom helper class?

approved

approved

Best way in my view to prevent CI jobs from failing if the download of the streams turns out to be very unreliable is to disable autoupdate for the regular...

Note: the cached NVD stream files are only used in the process of update of the CVE database. It plays no role in the actual scan.

approved