Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

WH Theme: SBOMS /  Notifications

  • Look at OpenSSF SLSA/SBOM work (SLSA).  See also mail from GOSSTSee SBOM
  • Consider adopting https://osv.dev/ (instead of CVE/CVSS). (These are not mutually exclusive)
  • We have no way to know who is using our projects, nor do we want to capture that data (so is the current vulnerability notification system sufficient?)

...