Brandon Lum

Hey @fridex ! Thanks for the heads up! Yep - we are in sync and have a hand in OpenVEX maintenance! This motivation was a bit more on thinking through...

Thanks for writing this detailed analysis @mdeicas ! I think having a proto definition which we use already use in GUAC would be nice, but like you said it mixes...

yea +1. Hmm ideally i think it should have a standard interface, although i think that given the experimental nature of this - and to better understand optimization issues, i...

Still important but adding long-term since this tweakable later, and likely will be affected by future changes in API.

I am going to work on a release information document, where we are looking towards monthly or bi-monthly releases. more to come!

>getting known vulnerabilities for a set of packages. Quick clarification: is this the vulnerability for each package or also including transitive vulnerabilities? The earlier should be simple if we add...

@dejanb @ctron i may have a use case to work together on this as well (similar around the vulns but also want to provide the VEX statements). We have some...

Hmm, checking in here, i think this may not be fully resolved? so reopening

updated comment to include verison and maybe commit hash

Hi @antgamdia ! Thanks for opening this! I think you've described the situation around PURLs pretty well. Our decision at the time to handle each case was deliberate due to...