Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

x/vulndb: create tool to display # importers of a module's packages to support vuln triage #61597

Open
tatianab opened this issue Jul 26, 2023 · 6 comments
Open

x/vulndb: create tool to display # importers of a module's packages to support vuln triage #61597

tatianab opened this issue Jul 26, 2023 · 6 comments
Assignees
@jba
Labels
vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Milestone
vuln/unplanned

Comments

@tatianab
Copy link

Create a CLI tool (or similar) which can determine the number of importers of a Go module's importable packages. (E.g., as a start, display the package with the most importers).
@tatianab tatianab added the vulncheck or vulndb Issues for the x/vuln or x/vulndb repo label Jul 26, 2023
@gopherbot gopherbot modified the milestones: Unreleased, vuln/unplanned Jul 26, 2023
@tatianab tatianab changed the title x/vulndb: create tool to display # importers of a module/package to support vuln triage x/vulndb: create tool to display # importers of a module's packages to support vuln triage Jul 26, 2023
@jba
Copy link
Contributor

jba commented Jul 26, 2023

https://go-review.googlesource.com/c/vulndb/+/513499

@robpike
Copy link
Contributor

robpike commented Jul 26, 2023

Also see the https://deps.dev UI and API.

@jba
Copy link
Contributor

jba commented Jul 27, 2023

The API is (exciting) news to me. I'll check it out.

@jba
Copy link
Contributor

jba commented Jul 27, 2023

@robpike I don't see how to get the dependents from the API.

@robpike
Copy link
Contributor

robpike commented Aug 3, 2023

@jba Sorry I thought you could. Maybe one day. But there is this: https://blog.deps.dev/enumerating-dependents/

@jba
Copy link
Contributor

jba commented Aug 4, 2023

Thanks, I didn't know about the BigQuery data set either. Will look into it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jba jba

Labels
vulncheck or vulndb Issues for the x/vuln or x/vulndb repo
Projects
None yet
Milestone
vuln/unplanned
Development

No branches or pull requests
4 participants
@robpike @tatianab @gopherbot @jba