{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"}],"enrichment":{"capability":"Generates and analyzes CSAF 2.0 documents, which describe product vulnerabilities and their remediation status in a standardized format.","skillfed_tags":["security-advisory","csaf-vex"],"use_cases":["Generate a CSAF advisory document from a CSV list of products and their known vulnerabilities","Parse and display an existing CSAF JSON file in a formatted table for review","Integrate CSAF generation into a security advisory pipeline using the package as a library","Publish vendor security advisories in the standardized CSAF format for compliance or distribution"],"what_it_does":"CSAF-Tool is a command-line utility and Python library for working with CSAF 2.0 documents\u2014the Common Security Advisory Framework standard for publishing structured vulnerability information. It reads product and vulnerability data from CSV files and generates a compliant CSAF JSON document that includes a product tree, vulnerability details, and remediation status. It can also parse and display an existing CSAF document in human-readable table format using the rich library.\n\nThe tool is designed for security teams and vendors who need to publish standardized vulnerability advisories. It depends on packageurl-python for package identification and rich for formatted terminal output. Development is dormant as of mid-2024, so it is suitable for stable, straightforward CSAF generation workflows but not for projects requiring active maintenance or new features.","worth_installing":"Yes, if you need to generate or analyze CSAF 2.0 documents and accept dormant maintenance. The low install friction, permissive license, and zero known vulnerabilities make it safe to use. However, do not expect bug fixes or new features\u2014evaluate whether the current feature set and stability meet your long-term needs before adopting it in a critical workflow."},"id":"csaf-tool","links":{"html":"https://skillfed.io/packages/csaf-tool","md":"https://skillfed.io/packages/csaf-tool.md","pypi":"https://pypi.org/project/csaf-tool/"},"maintenance":{"status":"dormant"},"meta":{"latest_release":"2024-06-12","license_spdx":null,"license_treatment":"permissive","name":"csaf-tool","python_support":"supports_current","summary":"CSAF generator and analyser"},"popularity":{"monthly_downloads":77614,"position":14511,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.3.2"}