VUvulnerabilityhistoryproject
developers

/api/developers

Changed on

Return a list of the developers who are authors of vulnerability-contributing commits, or fix commits.

get/api/developers

Request

Response

OK

idinteger
emailstring
nicknamestring

Obfuscated developer email address.

In VHP, we avoid using developer names and email addresses. We don't want to assign blame to the developers publicly; instead, we deterministically assign an animal name to their email address.

Our algorithm for assigning nicknames is relatively straightforward and can be found here: https://github.com/VulnerabilityHistoryProject/vulnerability-history/tree/master/lib/nicknames

Essentially, we compute the SHA-256 hash of the email address. The first half of the SHA is modded by the length of 902 common names to get the name. The second half of the SHA is modded by a length of 500 animal names. With 902x500 combinations, this makes 451,000 possible combinations of animals.

notesNotesObject

A freeform document (i.e. JSON) of any extra information we have on this record. Sometimes we don't have an exact place in our schema to place things, so we err on the side of retaining records and record them here.

Importantly, the schema of this object is subject to change. We try to keep it consistent, but all curators have a mind of their own.

Changes