stevespringett / vulndb-data-mirror Goto Github PK

I'm currently looking into the dependency-track project. One of my first issues is about the heavy usage of "*-SNAPSHOT" dependencies. For our company use I'd like to create a version which is only relying on release versions, available on the main maven repositories.

It seems all but this dependencies are providing appropriate release versions.

Is there anything I can help with to get version 1.0.0 released for this dependency?

Hi Steve,
I am working on dependency track and am trying to integrate with Vuln DB. According to the documentation here - https://docs.dependencytrack.org/datasources/vulndb/ I see that 2 things happen:

1. Vuln DB Data is completely mirrored to vulndb directory - performed by 'vulndb-data-mirror' tool.
2. Dependency track automatically syncs Vuln DB data every 24 hrs.

I read in the documentation of the tool:
You may estimate the number of requests required by dividing 100 by the total number of results in each of the three feeds.
I don't quite understand the meaning of three feeds. What are you referring to here ?

I would like to understand how many API calls will be made by 'vulndb-data-mirror' tool for step 1 and how many API calls would be made for step 2.