Hi,

madison API doesn't expose security-archive suites (bookworm-security,
trixie-security, ...). This require to use the "-u qa" option of
rmadison. Could you expose them in the API ?

Best regards,
Xavier

Example:

$ rmadison lemonldap-ng
lemonldap-ng | 2.0.11+ds-4+deb11u5 | oldoldstable        | source, all
lemonldap-ng | 2.16.1+ds-deb12u8   | oldstable           | source, all
lemonldap-ng | 2.21.2+ds-1+deb13u3 | stable              | source, all
lemonldap-ng | 2.21.3+ds-1~bpo12+1 | oldstable-backports | source, all
lemonldap-ng | 2.23.2+ds-1~bpo13+1 | stable-backports    | source, all
lemonldap-ng | 2.23.4+ds-1         | buildd-unstable     | source, all
lemonldap-ng | 2.23.4+ds-1         | unstable            | source, all

$ rmadison -u qa lemonldap-ng
 lemonldap-ng | 2.0.11+ds-4+deb11u5 | bullseye           | source, all
 lemonldap-ng | 2.0.11+ds-4+deb11u9 | bullseye-security  | source, all
 lemonldap-ng | 2.16.1+ds-deb12u8   | bookworm           | source, all
 lemonldap-ng | 2.16.1+ds-deb12u9   | bookworm-security  | source, all
 lemonldap-ng | 2.21.2+ds-1+deb13u3 | trixie-security    | source, all
 lemonldap-ng | 2.21.2+ds-1+deb13u3 | trixie             | source, all
 lemonldap-ng | 2.21.3+ds-1~bpo12+1 | bookworm-backports | source, all
 lemonldap-ng | 2.23.2+ds-1~bpo13+1 | trixie-backports   | source, all
 lemonldap-ng | 2.23.4+ds-1         | sid                | source, all

Control: tag -1 + wontfix
Control: severity -1 wishlist

No, it is an unauthenticated API and would expose data about internal
suites with unreleased security updates.

Also it would be separate API endpoint either way as the main archive
doesn't know about the security archive.

Ansgar