What's Changed
✨ New Features
- OSV Vulnerability Integration: Integrated the Open Source Vulnerabilities (OSV) API to fetch real-time vulnerability data for installed Linux packages.
- Synthetic CVSS Risk Scores: Calculate and aggregate synthetic CVSS risk scores, abstracting natural language severity flags (e.g., "Critical", "Important") for packages lacking native metric data.
- Security Dashboard: Display "Risk Score Mitigated" and real-time vulnerability statistics (Total Fixed, Critical Fixed, Moderate Fixed) across a new Security Dashboard and transactions detail view.
- Background Vulnerability Caching: Introduce a comprehensive background caching mechanism handling dual-tier OSV API queries (batch queries coupled with detail fallbacks for truncated payload fields).
- Admin Vulnerability Controls: Implement explicit administration endpoints to instantly trigger OSV re-fetch or complete vulnerability database rebuilds via the Admin UI.
🗑️ Removed
- Remove Package Comparison (
/analytics/compare), Package Freshness (/analytics/freshness), and Package Adoption (/analytics/adoption) endpoints, templates, and API functions.
Docker Image
docker pull ghcr.io/txlog/server:v1.24.0
Full Changelog: v1.23.2...v1.24.0