Skip to content

Support checking if things are approaching EOL with endoflife.date  #75

@G-Rath

Description

@G-Rath

https://endoflife.date/ provides a bunch of EOL dates, maintained by the general community and it has an api!

In theory, we could use this with osv-detector: since it knows the packages being used, we could try and see if any of them are in the array returned by https://endoflife.date/api/all.json.

In theory again, we could also attempt to pick up versions for other tools from known files, e.g. we could look for .<tool>-version files and assume they're .ruby-version, .node-version, etc.

(also for Ruby, we could use the ruby version that gets recorded in the Gemfile.lock too)

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions