Added
- advisory DB freshness reporting during offline scans
- stale-data warnings when the local advisory DB appears old or is missing sync metadata
Changed
- significantly improved advisory sync performance through bulk SQLite ingestion optimizations
- local advisory DB sync is now about 9.9x faster in our benchmark on the same machine and OSV npm dump
- README now includes the advisory sync benchmark and updated offline freshness guidance
Benchmark
Local benchmark on the same machine using the same OSV npm dump:
- advisory records: about 217,065
- before: 87.53s real
- after: 8.84s real
Example workflow
cve-lite advisories sync
cve-lite /path/to/project --offlineOr with an explicit DB path:
cve-lite advisories sync --output /path/to/advisories.db
cve-lite /path/to/project --offline-db /path/to/advisories.db