AppThreat / vulnerability-db

Vulnerability database and package search for sources such as Linux, OSV, NVD, GitHub and npm. Powered by sqlite, CVE 5.0, purl, and vers.
MIT License
88 stars 22 forks source link

Enhance metadata to detect app-only and filtered database #178

Closed prabhu closed 1 month ago

prabhu commented 1 month ago

App only databases include only NVD data from the AquaSource along with OSV and GHSA. We need to enhance the metadata to track this mode to help downstream tools differentiate between this and the full database that also includes OS dependencies.

In addition, we need to track any distro-specific ignores that was used to filter the database during pre-compilation.