Use meta data files from NVD

stevespringett / nist-data-mirror

A simple Java command-line utility to mirror the CVE JSON data from NIST.

Apache License 2.0

206 stars 93 forks source link

Use meta data files from NVD #16

Closed jeremylong closed 5 years ago

jeremylong commented 5 years ago

This PR adds the use of the meta data files instead of HEAD requests to determine if the data should be downloaded.

bumped minor version of the project
Warning banner is displayed if mirroring the XML files
Only the META files for the JSON data feeds are being used to determine if a file should be updated (including the XML files)

chadlwilson commented 5 years ago

Hi @stevespringett - thanks for merging this!

Is it possible to get a new release onto GitHub releases (or any Maven repo) that includes this? My understanding is that it's necessary to be able to use owasp-dependencycheck-5.0.0-M3 alongside this mirror tool (without building from source). It's rather convenient to just pull the pre-built jar without needing mvn etc.

stevespringett commented 5 years ago

@jeremylong have you by chance tested this with v5 m2 or m3? Good to release in your opinion? or will you be making additional changes?