Collect gentoo about vulnerablecode HOT 5 CLOSED

A better source to collect this data would be by cloning git clone https://anongit.gentoo.org/git/data/glsa.git . @haikoschol ^

from vulnerablecode.

Is there an API for gentoo, from where I can get all versions of a gentoo package? I am stuck due to this.

from vulnerablecode.

@sbs2001 I don't know of an API for this. Have you asked someone from the Gentoo project? I'd say if we can't get all the information we need for collecting a particular source, then we don't.

from vulnerablecode.

https://packages.gentoo.org/ has the data in HTML(which we have agreed not to consume), but I haven't came across any sort of an API.

Have you asked someone from the Gentoo project?

I will try, @pombredanne ^ might know someone from the Gentoo foundation.

from vulnerablecode.

Here's a screenshot of my recent email exchange with them:

Basically there's no API as of now, but they are planning to bring it.
Other solution I can think of is using clearlydefined.io 's API, but apparently they don't collect data about ebuild type of packages.
@haikoschol I guess I will postpone this for later phases of GSoC.

from vulnerablecode.