You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add vocabulary reference and expand HAL documentation
- Add release-notes/queries/vocabulary.md documenting HAL graph terms
- Expand llms/README.md with Timeline Navigation section and Key Properties Reference
- Add prev-security link relation to llms.txt month index table
- Update metrics.md with current file sizes
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude <[email protected]>
-**Completeness:** ✅ Equal—both return the CVE identifiers
162
162
-**Ergonomics:** The releases-index requires downloading a 1.2 MB file to extract 3 CVE IDs. The hal-index uses a dedicated `latest-security` link, avoiding iteration through all releases.
163
163
-**Link syntax:** Counterintuitively, the deeper HAL structure `._links.self.href` is more ergonomic than `.["releases.json"]` because snake_case enables dot notation throughout. The releases-index embeds URLs directly in properties, but kebab-case naming forces bracket notation.
164
-
-**Data efficiency:** hal-index is 23x smaller
164
+
-**Data efficiency:** hal-index is 31x smaller
165
165
166
-
**Winner:** hal-index (**23x smaller**)
166
+
**Winner:** hal-index (**31x smaller**)
167
167
168
168
### High Severity CVEs with Details
169
169
170
170
#### Query: "What High+ severity CVEs were fixed in the latest .NET 8.0 security patch, with titles?"
-**Ergonomics:** The hal-index uses `prev-security` links to skip non-security patches (SDK-only releases), directly navigating to security releases. The releases-index requires downloading a 1.2 MB file and filtering in memory.
275
275
-**Navigation model:** The `prev-security` link enables efficient backward traversal through security history without fetching intermediate non-security releases.
276
276
277
-
**Winner:** hal-index (**20x smaller**, with component information)
277
+
**Winner:** hal-index (**21x smaller**, with component information)
278
278
279
279
### CVE Details for a Month
280
280
281
281
#### Query: "What CVEs were disclosed in January 2025 with full details?"
| releases-index | All version releases.json files |**2.4 MB**|
344
344
345
345
**hal-index:**
346
346
@@ -396,16 +396,16 @@ done | sort -u | head -12
396
396
-**Ergonomics:** The hal-index uses `prev-security` links to jump directly between security months, skipping non-security months entirely. The releases-index requires downloading all version files (2.4+ MB), filtering by security flag, and deduplicating results.
397
397
-**Navigation model:** The `prev-security` link on timeline months enables efficient backward traversal through security history. The releases-index has no concept of time-based navigation.
398
398
399
-
**Winner:** hal-index (**40x smaller**, with version and component information)
399
+
**Winner:** hal-index (**37x smaller**, with version and component information)
400
400
401
401
### Critical CVE This Month
402
402
403
403
#### Query: "Is there a critical CVE in any supported release this month?" (November 2025)
-**Completeness:** ❌ The releases-index cannot answer this query. Even if there were CVEs in November, the schema only provides CVE IDs and URLs—no severity information. You would need to fetch each CVE URL from cve.mitre.org and parse the CVSS score.
448
448
-**Ergonomics:** The hal-index embeds `cvss_severity` directly in the disclosure records, enabling single-query filtering for CRITICAL vulnerabilities.
449
-
-**Use case:** This is a common security operations query ("Do I need to patch urgently?"). The hal-index answers it in 28 KB; the releases-index cannot answer it at all.
449
+
-**Use case:** This is a common security operations query ("Do I need to patch urgently?"). The hal-index answers it in 24 KB; the releases-index cannot answer it at all.
450
450
451
-
**Winner:** hal-index (**88x smaller**, and releases-index cannot answer this query—CVE severity is not available)
451
+
**Winner:** hal-index (**100x smaller**, and releases-index cannot answer this query—CVE severity is not available)
452
452
453
453
### Breaking Changes Summary
454
454
455
455
#### Query: "How many breaking changes are there in .NET 10 by category?"
0 commit comments