aboutcode-org / vulnerablecode

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/
https://public.vulnerablecode.io
Apache License 2.0
517 stars 190 forks source link

Make models better for efficient queries #966

Open TG1999 opened 1 year ago

TG1999 commented 1 year ago

Currently we store packagerelatedvulnerabilities in one table, either a package fixes a vulnerability or affected by some vulnerability, the combination of package and vulnerability is stored in the same table with a flag for fix, We should segregate this data in 2 tables.

See also:

pombredanne commented 4 weeks ago

Here are the diagrams we discussed in today's community call:

models