Nix-Security-WG / nix-security-tracker

Web service for managing information on vulnerabilities in software distributed through Nixpkgs
26 stars 4 forks source link

feat(models): improve the Nix evaluation data models #148

Closed fricklerhandwerk closed 8 months ago

fricklerhandwerk commented 8 months ago

We now have more fields for the evaluation, and timestamping in preparation for managing the Nixpkgs repository.

as part of breaking down #123

RaitoBezarius commented 8 months ago

Please hold off with this PR, I am not totally done with the fields yet.

fricklerhandwerk commented 8 months ago

Yep, there are a few future commits which still change them. I'd like to have as many changes at once as possible, otherwise we'll just be piling up migrations.

RaitoBezarius commented 8 months ago

Yep, there are a few future commits which still change them. I'd like to have as many changes at once as possible, otherwise we'll just be piling up migrations.

The goal is to avoid having 50 migrations, so while I am developing in the branch, if you chip away individual migrations, I cannot squash them anymore.

fricklerhandwerk commented 8 months ago

Generally, can we squash away all migrations before we deploy to production?

RaitoBezarius commented 8 months ago

We can but I don't recommend squashing migrations more than necessary, they are valuable development knowledge. I recommend squashing migrations done too hastily in development.

RaitoBezarius commented 8 months ago

123 is ready, I propose to hop on this one rather and merge it directly.