Hi CSAF-TC,
In working on the JSON format, I've observed the following possible areas of enhancement:
- Drop "ordinal" from JSON output - this field adds no value to the serialized output, that I can tell. I am planning to update the export logic of the conversion tool to automatically supply ordinals for the XML format, which made me think they should just be dropped from the JSON.
- use JSON schema for CVSS? Omar suggested this in an email on May 15. Seems like it might be a good idea...
- Change CVSSScoreSets to just "Scoring" in JSON, with children for v3.0 v3.1, etc.
- Why does Relationship include a _list_ of products? I believe it should just be one. Anyone know differently?
Eric.