davisjam / vuln-regex-detector

Detect vulnerable regexes in your project. REDOS, catastrophic backtracking.
MIT License
316 stars 27 forks source link

cache: server/client: expiration #44

Closed davisjam closed 6 years ago

davisjam commented 6 years ago

The server should include a suggested expiration date on its opinion. This is especially true for SAFE where the server might change its mind (see e.g. #43 / #41).

The npm client maintains a local cache. This cache should monitor expiration dates. Note that because of clocks the expiration date from the server should be relative, e.g. "7 days from now", and the client should convert this to its local clock.