| feat: build CVE database from MITRE cvelistV5 instead of NVD API New cmd/nvd2sqlite-cvelistV5 tool: downloads the daily cvelistV5 baseline release (~525 MB zip via GitHub CDN), parses CVE JSON 5.x with a worker pool and produces a drop-in replacement for the nvd2sqlite database. No API key, no rate limits, no NVD availability issues. - Normalizes free-text CNA version ranges (97% of dirty rows fixed) - Unit + e2e tests and smoke script - Workflow: full 30-month rebuild daily + sanity check (>100k CVEs) - Fixes bug where incremental mode published a 7-days-only database - Old cmd/nvd2sqlite kept unchanged | 2 个月前 |