Repository navigation
feat(website): add a Who uses CVE Lite CLI page - #1400
Merged
Merged
Conversation
…t runs the scan The homepage linked its French government entry to betagouv/gitscan, which only mirrors other repositories' manifests and has no integration of its own. Link the pre-push hook in refugies-info/karfur instead, which runs the scan with a high-severity threshold before every push.
One data file holds every adopter entry: owner, how it runs, what the configuration does, a link to the file that proves it, whether a scan is shown to have run, and the date the link was last checked. Keeping it out of the page means adding a project is a data change. Also records the measured npm download figures. The published total is the raw sum of npm's daily data, the conservative figure anyone re-deriving it gets, rather than the README badge, which renders an 18-month window.
Lists public adopters in three expandable tables: established projects and organisations, a searchable and filterable list of smaller projects, and projects that recommend or package the CLI rather than run it. Rows are grouped by owner, so several repositories from one maintainer read as one adopter, and a repository inside a large organisation says so rather than implying a rollout. Status separates a configuration that exists from public evidence that a scan ran, and is stated exactly for mixed owners.
… homepage Adds the page to the navigation and to the homepage's adopter bar, and puts the measured download total and adopter count under the homepage headline. Both figures come from the adopter data, so neither can drift from the page.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds a public page listing projects that run, recommend, or package CVE Lite CLI, each with a direct link to the file that proves it and the date that link was checked. #1396 stays the living tracker, and the page links back to it for additions and corrections.
Entries are grouped by owner, so one maintainer with eight repositories reads as one adopter, and a single repository inside a large organisation says so rather than implying a rollout. Each row opens to show every repository, what its configuration does, and whether there is public evidence that a scan has actually run. Five candidates from the inventory were left out: two vendor a different tool that happens to share the name, one has a workflow GitHub never runs, one has since removed the integration, and one could not be verified.
The homepage gains the measured download total under the headline and links to the page from the navigation and the adopter bar. It also fixes the French government entry, which pointed at a repository with no integration of its own and now points at one that runs the scan before every push.
Closes #1399