All pull requests

Pull requests

• Bump org.metaeffekt.core:ae-security from 0.158.0 to 0.159.0

  dependenciesjava
  #7707·dependabot[bot] opened Oct 18, 2026Bot·

  ·
  1

• Bump com.github.luben:zstd-jni from 1.5.7-22 to 1.5.7-23

  dependenciesjava
  #7706·dependabot[bot] opened Oct 18, 2026Bot·

  ·
  1

• v4-migrator: map unknown or retired vulnerability sources to UNKNOWN

  #7705·jha-pravin opened Oct 17, 2026Contributor·2 of 6 tasks·

  ·
  1

  1

• Expose latest project status in notification subjects

  #7704·jdotc1 opened Oct 17, 2026·2 of 6 tasks·

  ·
  1

  1

• Fix: Resolve BOM-Link fragments to avoid applying VEX analysis project-wide

  #7694·jha-pravin opened Oct 15, 2026Contributor·2 tasks done·

  ·
  1

  1

• Prefer primary NVD CVSS metrics

  #7652·mjatin2007 opened Oct 12, 2026·6 tasks done·

  ·
  1

• Fix/arch qualifier matching

  #7645·Alimohamed147 opened Oct 9, 2026·2 of 6 tasks·

  ·

  · 5.3
  1

  5

• fix(apiserver): accept pipe-separated UUIDs on dependency graph path

  #7636·L00PLeGeNd opened Oct 9, 2026·2 of 6 tasks·

  ·
  1

  1

• Accept all notification rule fields on creation

  #7627·volodymyr-jdev opened Oct 8, 2026Contributor·2 of 6 tasks·

  ·
  1

  4

• Add scope filter to CompositeDependencyNodeFilter

  enhancement
  #7618·adamtorokaccreativetg opened Oct 8, 2026Contributor·2 of 6 tasks·

  ·

  · 5.x
  1

  5

• Evaluate component policies on package health

  #7586·Nihad74 opened Oct 5, 2026·3 of 4 tasks·

  ·
  1

  1

• Expose package health through the REST API v2

  #7585·Nihad74 opened Oct 5, 2026·3 of 4 tasks·

  ·
  1

• Resolve package health metadata from deps.dev and GitHub

  #7584·Nihad74 opened Oct 5, 2026·4 of 5 tasks·

  ·
  1

• ADR for feature "Package Health": OpenSSF Scorecard and repository metrics

  #7583·Nihad74 opened Oct 5, 2026·2 tasks done·

  ·
  1

• Export EPSS score as rating in VEX output

  #7561·jha-pravin opened Oct 4, 2026Contributor·2 tasks done·

  ·
  1

  1

• Original bom storage retention

  #7527·elias-chevere opened Sep 30, 2026·4 of 6 tasks·

  ·
  1

  20

• Support multiple licenses per component

  #7435·cartermitchellLM opened Sep 23, 2026·3 tasks·

  ·
  25

• Add project filtering for GET /api/v2/projects

  #7348·Nihad74 opened Sep 18, 2026·2 of 6 tasks·

  ·
  16

• Adding vulnerability sorting by project count

  #7334·krishardy opened Sep 18, 2026·2 tasks done·

  ·
  2

• Match OS source packages in the internal vulnerability analyzer

  #7331·onestay opened Sep 17, 2026·2 of 6 tasks·

  ·
  1

  2

• Treat connection resets as transient regardless of exception type

  #7205·arjavdongaonkar opened Sep 1, 2026Contributor·2 tasks done·

  ·
  3

• Expose vulnerability attribution date to CEL policy expressions

  #7177·arjavdongaonkar opened Aug 30, 2026Contributor·2 of 3 tasks·

  ·
  1

  2

• Support expiry of vulnerability suppressions

  #7175·arjavdongaonkar opened Aug 30, 2026Contributor·3 of 4 tasks·

  ·
  1

  2

• Expose vulnerability analysis to CEL policy expressions

  #7173·arjavdongaonkar opened Aug 30, 2026Contributor·2 tasks done·

  ·
  1

  2

• Ignore letters appended to numeric version parts in VersionDistance

  #7170·arjavdongaonkar opened Aug 30, 2026Contributor·2 tasks done·

  ·
  1

  2