Niklas

> Perhaps the type should be hoisted to the policy (instead of policy condition). As long as there is a single condition or all conditions map to the same type,...

> What I'm currently trying to refactor to is this: I think that makes sense. > The PolicyEvaluator interface defines a method List evaluate(final Policy policy, final T target) with...

Thanks for looking into this btw @fupgang, really appreciate it!

@nickrmc83 I think this effort could be greatly accelerated by assisting @Andre-85 in reviewing and testing their implementation against realistic datasets. Waiting for me to have capacity to do so...

@mjaix I'm not too deep into Debian versioning, but my naive assumption was that comparing versions as outlined [here](https://manpages.debian.org/stretch/dpkg-dev/deb-version.5.en.html#Sorting_algorithm) should suffice. Do those branches have a meaning *on top* of...

FWIW, I had to deal with this as again while building a [PoC for a revised vulnerability database](https://github.com/DependencyTrack/vuln-db/tree/main): * https://github.com/DependencyTrack/vuln-db/blob/bab5f36f8a873f273fb7c5de5dcb5151d731d29e/src/main/java/org/dependencytrack/vulndb/cli/ScanCommand.java#L174-L191 * https://github.com/DependencyTrack/vuln-db/blob/bab5f36f8a873f273fb7c5de5dcb5151d731d29e/src/main/java/org/dependencytrack/vulndb/source/osv/OsvImporter.java#L180-L188 The concept of "[additional matching criteria](https://github.com/DependencyTrack/vuln-db/blob/bab5f36f8a873f273fb7c5de5dcb5151d731d29e/src/main/resources/schema.sql#L105-L106)" can probably...

@jkowalleck May I ask for a final look please?

> Add another state "soft validation" Instead of the soft validation wording, I'd prefer the current boolean option *Validation enabled* to become a `BomValidation` enum with possible values being along...

Thanks *so* much for taking this up @sekwah41. It's really much appreciated! > As part of the migration process, some components and plugins used in Vue 2 may not be...

@sekwah41 Agree with all points. Having a drop-in replacement for now is a good strategy to reduce the effort of this migration exercise. We can move to the officially recommended...