brian d foy

Add GitHub Advisory Database references to relevant reports

1

See f9c08fdd918410ab8e7982734f4b0c14a3395f2f for example.

Automatically open an issue for new CVEs

4

I have an [RSS feed](https://www.theperlreview.com/perl-cve-atom.xml) for new reports in the MITRE search results. It's made by *util/make_feed*. It's quick and dirty, and a cron job uploads the file to the...

Investigate embedded versions of Tcl

3

Go through the Perl Tk releases and find which versions embed which - [ ] tcl - [ ] libjpeg - [ ] whatever

Unquoted versions in YAML might turn into floating point numbers, and that would lose precision.

Break out CPAN::Audit::DB

2

I'm making several release but the only thing that's changing is the generated module. Instead of updating the entire distribution (and bumping the version of CPAN::Audit each time), there could...

use Compiler::Lexer 0.13; use Data::Dumper; my $lexer = Compiler::Lexer->new( $0 ); my $tokens = $lexer->tokenize( 'qw( foo bar baz )' ); say Dumper ($tokens ); $VAR1 = [ bless( {...

I'm compiling perls on a new M2 MacBook Pro under Ventura. `nm` gives slightly different output $ uname -a Darwin m2otter.local 22.6.0 Darwin Kernel Version 22.6.0: Wed Jul 5 22:21:53...

Have a new Log4perl category that turns on mega verbose debugging. That way we can get a lite debugging situation. And, categories per module so we only have to see...

Various bits of code want to know things about feeds. Instead of decorating objects, give them a key they can use to look up a feed object.

Allow per-subreddit, per-twitter configuration

2

Some feeds might go to both /r/perl6 and /r/perl, or other things like that.