#1148638 ITP: golang-github-facebookincubator-nvdtools -- tools and libraries for National Vulnerability Database feeds

Package:
wnpp
Source:
wnpp
Submitter:
Juan Manuel Méndez Rey
Date:
2026-09-21 12:54:03 UTC
Severity:
normal
#1148638#5
Date:
2026-09-21 12:53:13 UTC
From:
To:
* Package name    : golang-github-facebookincubator-nvdtools
  Version         : 0.1.5
  Upstream Contact: https://github.com/facebookincubator/nvdtools/issues
* URL             : https://github.com/facebookincubator/nvdtools
* License         : Apache-2.0
  Programming Lang: Go
  Description     : tools and libraries for National Vulnerability Database feeds

NVD Tools is a collection of Go libraries and command-line utilities
 for working with vulnerability data from the National Vulnerability Database.
 The libraries implement Well-Formed CPE Names (WFN) parsing, matching and
 conversion, CVSS v2 and v3 scoring, and parsing of NVD JSON and XML feeds.
 .
 The command-line tools convert third-party vendor advisories into the NVD JSON
 format, match CPEs against CVE feeds, and maintain a local vulnerability
 database. syft uses the WFN library to build CPEs.
 .
 This package is a build dependency of syft (ITP https://bugs.debian.org/1124819).

I intend to maintain this package within the Debian Go Packaging Team.