VCIO-next: Create improver to detect issues

[pombredanne]

We have sometimes issues and conflicts in the data we collect. For instance, we may have related advisories that contain different affected package version ranges. Or may disagree on the severity of a vulnerability or else. This is also something

For this we should create new improver to detect issues: it could detect and report discrepancies and conflicts in related advisories for a CVE, and flag these. That would later be input to curate these issues.

[saransh1307]

can I work on this issue?

[pombredanne]

@saransh1307 you sure can, but this is a fairly complex issue for a start.
May I suggest you check first some of the version issues in https://github.com/aboutcode-org/univers/issues?q=is%3Aissue+is%3Aopen+label%3A"good+first+issue" ... they are not always easy, but bite-size and much less complex.

[saransh1307]

Alright, @pombredanne, I'll focus on the suggested good first issues to build a solid understanding of the application. As I get more familiar with its structure and flow, I'll revisit this issue with a more informed perspective.