Roadmap#
Vulnerability-Lookup is developed iteratively. This roadmap communicates the
project’s continuing priorities without assigning dates to work that has not
yet been scheduled. Completed work is documented in CHANGELOG.md,
and concrete proposals and their status are tracked in
GitHub issues.
Current priorities#
The maintainers currently focus on:
Vulnerability data coverage and quality — maintain the existing feeders, add useful sources and enrichments, and improve correlation across advisory identifiers.
Publishing and disclosure workflows — strengthen CNA, GNA/GCVE, local advisory, and coordinated vulnerability disclosure capabilities.
Interoperability — evolve the API, feeds, synchronization, sightings, KEV catalogs, and VEX support while communicating compatibility changes.
Operations and scale — improve installation, upgrades, performance, observability, and deployment documentation for self-hosted instances.
Security, privacy, and access control — continue hardening the service, its authentication and authorization model, and operator guidance.
User and contributor experience — improve the web interface, documentation, testing, and contribution workflow.
These themes describe direction rather than a commitment to a particular feature or release. The ordering may change in response to security issues, upstream data-source changes, operational needs, and community feedback.
Proposing and following work#
Before starting a substantial feature, open a
feature request
describing the problem, intended users, alternatives, compatibility impact,
and—where possible—an implementation outline. Maintainers use the public issue
and pull-request history as the detailed, live roadmap. Decisions follow
GOVERNANCE.md, and release outcomes are recorded in the
changelog.
Contributions to any current priority are welcome; see
docs/contributing.md before submitting a pull request.