文件
websafe-kb/08-threat-intel/generated/source-catalog-audit.md

7.7 KiB

Source Catalog Audit

  • generated_at: 2026-03-18T17:41:42+00:00
  • systems: 62
  • sources: 146
  • active_sources: 110
  • retired_sources: 36
  • systems_with_active_official: 62/62
  • systems_with_machine_readable_source: 57/62

Retired Sources

  • adobe-commerce Adobe Security Bulletins -> replacements: Adobe Magento Security Index, NVD Adobe Commerce, GHSA Adobe Commerce | reason: Original bulletin index probe was unstable under the old transport path; vendor index replacement uses explicit request policy and parser hints.
  • adobe-commerce GHSA Adobe Commerce -> replacements: Adobe Magento Security Index, NVD Adobe Commerce | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; Adobe index and NVD remain active replacements.
  • adobe-commerce Sansec Research -> replacements: GHSA Adobe Commerce, Adobe Magento Security Index | reason: Research index is too slow for daily active monitoring; GHSA Adobe Commerce provides a stable machine-readable replacement.
  • angular GitHub Global Advisories -> replacements: OSV Angular | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Angular remains the active replacement source.
  • astro GitHub Global Advisories -> replacements: OSV Astro | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Astro remains the active replacement source.
  • discourse Discourse Meta Security -> replacements: Discourse Release Notes RSS, GitHub Discourse Advisories | reason: Meta security category HTML changed and no longer provides stable scrape semantics for health checks.
  • discourse GitHub Discourse Advisories -> replacements: Discourse Release Notes RSS | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; Discourse release feed remains the active official source.
  • django Django Security RSS -> replacements: Django Security Weblog, Django Security Releases Archive | reason: Official security tag feed became unstable; use official weblog index and release archive instead.
  • drupal Drupal Security Advisories Site -> replacements: Drupal Security Advisories RSS, GHSA Drupal Core | reason: Drupal security index page became unstable for repeated HTML scraping; RSS + GHSA replacement is used for active monitoring.
  • drupal GHSA Drupal Core -> replacements: Drupal Security Advisories RSS, NVD Drupal | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; RSS and NVD remain active replacements.
  • esbuild GitHub Global Advisories -> replacements: OSV esbuild | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV esbuild remains the active replacement source.
  • express GitHub Global Advisories -> replacements: OSV Express | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Express remains the active replacement source.
  • fastify GitHub Global Advisories -> replacements: OSV Fastify | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Fastify remains the active replacement source.
  • flask GitHub Global Advisories -> replacements: OSV Flask | reason: Unauthenticated GitHub advisory API is quota-limited; OSV Flask remains the active machine-readable source.
  • hapi GitHub Global Advisories -> replacements: OSV Hapi | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Hapi remains the active replacement source.
  • haproxy HAProxy Security Advisories -> replacements: HAProxy Blog Feed | reason: Legacy haproxy.org security page no longer yields stable scrape results for monitoring.
  • koa GitHub Global Advisories -> replacements: OSV Koa | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Koa remains the active replacement source.
  • laravel GitHub Global Advisories -> replacements: OSV Laravel | reason: Unauthenticated GitHub advisory API is quota-limited; OSV Laravel remains the active machine-readable source.
  • mattermost Mattermost Security Updates -> replacements: NVD Mattermost | reason: Mattermost security updates page returned repeated 403 responses from the collector path; NVD replacement remains active.
  • mediawiki MediaWiki Security Releases -> replacements: NVD MediaWiki | reason: MediaWiki security page is no longer reachable reliably from the collector path; NVD replacement remains active.
  • moodle Moodle Security News -> replacements: NVD Moodle | reason: Moodle security page returned repeated 403 responses from the collector path; NVD replacement remains active.
  • nestjs GitHub Global Advisories -> replacements: OSV NestJS | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV NestJS remains the active replacement source.
  • nextjs GitHub Global Advisories -> replacements: GitHub Next.js Advisories, OSV Next.js | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; GitHub Next.js Advisories and OSV Next.js remain active replacements.
  • nuxt GitHub Global Advisories -> replacements: Nuxt Security, OSV Nuxt | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; Nuxt Security and OSV Nuxt remain active replacements.
  • rails GitHub Global Advisories -> replacements: OSV Rails | reason: Unauthenticated GitHub advisory API is quota-limited; OSV Rails remains the active machine-readable source.
  • react GitHub Global Advisories -> replacements: GitHub React Advisories, OSV React | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; GitHub React Advisories and OSV React remain active replacements.
  • spring-boot GitHub Global Advisories -> replacements: Spring Security Advisories | reason: Unauthenticated GitHub advisory API is quota-limited; Spring official security page remains the active source.
  • spring-framework GitHub Global Advisories -> replacements: Spring Security Advisories | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; Spring Security Advisories remains the active replacement source.
  • spring-security GitHub Global Advisories -> replacements: Spring Security Advisories | reason: Unauthenticated GitHub advisory API is quota-limited; Spring official security page remains the active source.
  • sveltekit GitHub Global Advisories -> replacements: OSV SvelteKit | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV SvelteKit remains the active replacement source.
  • symfony GitHub Global Advisories -> replacements: OSV Symfony | reason: Unauthenticated GitHub advisory API is quota-limited; OSV Symfony remains the active machine-readable source.
  • undici GitHub Global Advisories -> replacements: OSV Undici | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV Undici remains the active replacement source.
  • vite GitHub Global Advisories -> replacements: Vite Security, OSV Vite | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; Vite Security and OSV Vite remain active replacements.
  • vue GitHub Global Advisories -> replacements: Vue Security, OSV Vue | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; Vue Security and OSV Vue remain active replacements.
  • webpack GitHub Global Advisories -> replacements: OSV webpack | reason: Unauthenticated GHSA API requests are rate-limited in daily monitoring; OSV webpack remains the active replacement source.
  • werkzeug GitHub Global Advisories -> replacements: OSV Werkzeug | reason: Unauthenticated GitHub advisory API is quota-limited; OSV Werkzeug remains the active machine-readable source.