Philippe Ombredanne

Deploy on public server

4

- [x] Decide on a DNS domain name and acquire name - [x] Provision server (Philippe), possibly with GCP credits at least for the initial DB creation - [ ]...

We have major changes coming up and it would be best to start versioning the API.

API fixed_packages issues

2

from @tdruez The current implementation of the `fixed_packages` on the package endpoint is not convient for the data consumer: ``` { 'purl': 'pkg:npm/%40theia/[email protected]', 'affected_by_vulnerabilities': [{ 'summary': 'Insufficient Verification of Data...

Some published advisory are problematic because they can lead to misleading interpretations and either false positive or false negative. In particular this is the case for unbounded or star version...

These are examples of references where we should also extract a reference id for the the CVEs, but we do not: - https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3866.json - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-3866

Adopt single search box in UI

1

I think we should revisit the design for search to have a single search box rather than to have multiple search boxes. The content that is searched can help determine...

Otherwise the UI is not really usable. The display is limited to 50 rows.

Streamline data returned by the API

1

There is too much data returned by default in API listings. - too many records: 100 is too much at once - too much data: we return the whole details...