What's Changed
Added
- Extract CVSS scores and structured vulnerability severity natively from the OSV ecosystem arrays.
- Add optimized database indexes (
idx_pv_pkg_ver_rel_ecoandidx_ti_pkg_ver_rel_action) to accelerate vulnerability lookups.
Changed
- Improve OSV fetch performance using 10-worker concurrent HTTP pools.
- Optimize vulnerability database update using 200-row batch SQL upserts.
- Refactor transaction scoreboard calculation with incremental tracking to evaluate only affected packages instead of historical data.
- Fix severe database bottleneck in scoreboard calculation by replacing nested loops with a single-pass boolean aggregation query and
MATERIALIZEDCTEs, reducing query times from hours to milliseconds.
Docker Image
docker pull ghcr.io/txlog/server:v1.25.2Full Changelog: v1.25.1...v1.25.2