google / osv.dev

Open source vulnerability DB and triage service.
https://osv.dev
Apache License 2.0
1.55k stars 190 forks source link

Revert to bulk download for NVD #1876

Open oliverchang opened 11 months ago

oliverchang commented 11 months ago

Per https://groups.google.com/a/list.nist.gov/g/nvd-news/c/aofnAd3HP2g

There will be a bulk download option available some time in the future. In the meantime, the legacy JSON feeds will remain available until then.

andrewpollock commented 10 months ago

I'd like to make sure we have determined the benefits/compelling reasons for doing this?

I think the way the CVE data is expressed via the API is slightly richer than the legacy feeds, for example.