Tim Bastin
Tim Bastin
https://github.com/ossf/malicious-packages
We need a metrics endpoint to integrate with other services. It would be great to at least obtain the owner id of an organization from a metrics endpoint. I am...
I thought about a route design like this: Retrieve all details of a single CVE: `GET /vulndb/`. Filter CVEs `GET /vulndb` - I want to be able to: 1. List...
I am considering the possibility of utilizing the osv-scanner as a replacement for cdxgen within Flawfind. The rationale behind this exploration stems from several factors: 1. Size Efficiency: osv-scanner is...
VEX provides critical insights into the exploitability of vulnerabilities in software components, enabling users to prioritize remediation efforts effectively. ### Why is this important? 1. **Efficiency**: Incorporating VEX download capability...