Skip to content
GitHub Explorer

nexB/vulnerablecode

View on GitHub ↗Related repositories →

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

active 2024-07-07 → 2024-08-14 (UTC)

Partial coverage15,028 / 18,393 hourly files (82%) · 2 absent upstream · 3,364 failed, retryable2024-07-06 → 2026-08-11 (UTC)— sampled evenly across the window, so rankings and trends hold; absolute counts scale up.
Events
90
Pushes
6
Pull requests
8
Issues
8
Stars
6
Forks
3

Activity over time

Daily event counts in the loaded window

Line chart, 39 days from 2024-07-07 to 2024-08-14. Pushes: 6 total, peak 2 in a day. Pull requests: 8 total, peak 3 in a day. Issues: 8 total, peak 2 in a day. Comments: 39 total, peak 6 in a day. Stars: 6 total, peak 1 in a day.

  • Pushes
  • Pull requests
  • Issues
  • Comments
  • Stars

Top contributors

Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity

ContributorContributionsPushesPRsComments
johnmhoran193312
ziadhany181010
pombredanne8004
TG19996240
ambuj-12116013
keshav-space5002
DennisClark5004
michaelehab4002
mjherzog1001
chinyeungli1000
JafarAkhondali1001

Recent activity

Latest issues, pull requests and releases

  • Pull request#1545TG19992024-08-11 21:02
  • Issue#1544pombredanne2024-08-11 08:42
    clarify univers usage for alpine versions.
  • Issue comment#614pombredanne2024-08-11 08:39
    Add proper license for nginx importer
  • Issue#614pombredanne2024-08-11 08:39
    Add proper license for nginx importer
  • Issue comment#1528johnmhoran2024-08-11 02:34
    Match affected and fixed-by Packages
  • Issue comment#1528johnmhoran2024-08-11 00:49
    Match affected and fixed-by Packages
  • Issue comment#1528johnmhoran2024-08-11 00:37
    Match affected and fixed-by Packages
  • Issue comment#1543DennisClark2024-08-09 20:41
    Calculate Vulnerability Risk
  • Issue#1543DennisClark2024-08-09 20:23
    Calculate Vulnerability Risk
  • Issue comment#1516keshav-space2024-08-09 18:12
    Incorrect affected package in composer advisories
  • Issue#1516keshav-space2024-08-09 18:12
    Incorrect affected package in composer advisories
  • Issue comment#1512DennisClark2024-08-09 16:39
    Consider prioritization using CVE_Prioritizer
  • Issue comment#1528johnmhoran2024-08-07 02:00
    Match affected and fixed-by Packages
  • Issue comment#1528johnmhoran2024-08-07 01:53
    Match affected and fixed-by Packages
  • Issue comment#1528johnmhoran2024-08-07 00:57
    Match affected and fixed-by Packages
  • Issue#1540chinyeungli2024-08-06 23:23
    Migrate repository to aboutcode-org
  • Issue comment#1518ziadhany2024-08-03 00:51
    Add support for reference_type
  • Issue#1534ziadhany2024-08-02 23:42
    Update the existing importers to use the reference type
  • Issue comment#95DennisClark2024-08-02 19:58
    Collect exploit pointers
  • Issue comment#1452DennisClark2024-08-02 19:21
    Collect exploits from Packet Storm
  • Issue comment#1530johnmhoran2024-07-30 22:58
    Package details page URLs use '?' rather than '%3F', and VCIO disregards the portion of the PURL starting with '?'
  • Pull request#1528johnmhoran2024-07-30 00:52
  • Issue comment#1093ambuj-12112024-07-27 19:23
    Add CWE support in all importers
  • Pull request#1526ambuj-12112024-07-27 18:21
  • Issue comment#1320johnmhoran2024-07-24 00:08
    Begin work on combining affected and fixed by packages #1287

Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 6 stars here means stars gained during the window, not the repo's star count.