Extend PHP client to add caching and authentication - Githubissues

sonatype-nexus-community / bach

Dependency vulnerability auditor for PHP

Apache License 2.0

14 stars 15 forks source link

Extend PHP client to add caching and authentication #2

Open ken-duck opened 5 years ago

ken-duck commented 5 years ago

Add a couple of features to the MVP client

Caching

Cache results to disk for 12 hours, so if the same package is scanned more than once it does not check OSS Index
Before requesting results from OSS Index for a package, see if the cached results are valid
If a plug-and-play caching algorithm cannot be found, do not implement caching

Rate limits

Reads an optional username/token from a configuration file on disk which is passed via the OSS Index API to allow use of an authenticated request which has a less restrictive rate limit
Gracefully handles a rate limit by informing the user that it has be exceeded
- If the user is unauthenticated, mention that authenticated users have a higher rate limit