fedcode-next: Code framework to automatically tag as "curated" the base data that only needs quick or no human review #1715

Activity

1. pombredanne

   added this to 00-AboutCodePlanneron Jul 22, 2025
2. keshav-space

   moved this to Needs prep in 00-AboutCodePlanneron Mar 16, 2026
3. keshav-space

   self-assigned this

   on Mar 19, 2026
4. TG1999

   moved this from Needs prep to In progress in 00-AboutCodePlanneron Apr 9, 2026
5. keshav-space commented on Jun 1, 2026

   

   keshav-space

   on Jun 1, 2026

   Last edited by pombredanne

   Member

   More actions

   This is completed in:

   • feat: detect advisory conflicts at package alias intersections and compute partially curated advisories #2276 7632915
   • Add curation dashboard to resolve conflicting package version range #2316 4dc91d7

   The main pull requests are:

   • feat: detect advisory conflicts at package alias intersections and compute partially curated advisories #2276
   • Add curation dashboard to resolve conflicting package version range #2316

   The compute_advisory_todo_v2 VulnerableCode pipeline now compares the package affected and fixed versions as reported by various advisories for a vulnerability.

   Any disagreement between affected and fixed versions is stored across all versions for human curation. Consensus range is precomputed and stored in partially curated advisory so that final curation requires minimal user input. All of this is stored in the AdvisoryToDoV2 model, which is used to drive the final user curation panel.

   This is available at http://127.0.0.1:8001/advisories/todos/<todo_id/package/curate/ for a local deployment, or you can view an example online at https://public2.vulnerablecode.io/advisories/todos/e4fdb0a8-e8a0-4efb-9b08-6b0a30a70ffd/package/curate/

   See also these screenshots:

   
6. keshav-space

   closed this as completedon Jun 1, 2026
7. github-project-automation

   moved this from In progress to Done in 00-AboutCodePlanneron Jun 1, 2026
8. hesa

   moved this from Done to Reviewed in 00-AboutCodePlanneron Jun 22, 2026
9. pombredanne

   moved this from Reviewed to Validated in 00-AboutCodePlanneron Aug 5, 2026