tdruez

> One a project page, display the created date The project created date is already displayed under the project name:  > date of the...

> IMO we should expand the support for all purls in one project (either https://github.com/hritik14/purl.fyi or otherwise). The effort for expanding PURL support should continue in `packageurl-python`.

@JonoYang There must be a better way than duplicating the whole compose file for a few line additions. Also, this is likely to be out of sync each time we...

@pombredanne Could you provide the status values for each case?

ScanCode.io: * input: **1.2 to 1.6, JSON and XML** https://github.com/nexB/scancode.io/blob/main/scanpipe/pipes/cyclonedx.py * output: **1.4 to 1.6 JSON** https://github.com/nexB/scancode.io/blob/main/scanpipe/pipes/output.py#L715 DejaCode: * input: **1.2 to 1.6, JSON and XML** (delegated to ScanCode.io) *...

Moved to scancode-toolkit repo for action to update the CycloneDX support.

> The current timeout of 5 seconds is insufficient for fetching archives https://docs.python-requests.org/en/latest/user/advanced/#timeouts > The connect timeout is the number of seconds Requests will wait for your client to establish...

@keshav-space So we may want to implement a combination of adding an automatic retry on timeout exception + raising the default timeout value to something around 10 seconds.

> And that's it. Not exactly, my point is to have detailed notes along a release about what's new and what requires special attention for upgrading. Similar to https://docs.djangoproject.com/en/5.0/releases/5.0/

My suggestion: - The current CHANGELOG.rst evolve into "Release notes" that will look somehow similar to https://docs.djangoproject.com/en/5.0/releases/5.0/ - The changelog content is generated at release time using the "Generate release...