Add importer for safetydb

[sbs2001]

Signed-off-by: Shivam Sandbhor shivam.sandbhor@gmail.com

This data is imported from https://github.com/pyupio/safety-db .

Fixes #91

[pombredanne]

@Jwomers ping!
Do you have any intention to have an open source license with the NC for pyup data? https://github.com/pyupio/safety-db/blob/b873cceee96c04c4e9df93d17087592e94290482/LICENSE.txt
@sbs2001 thank ++ for this. This is useful to have but we cannot aggregate the data if this is precludes commercial use (whatever non commercial means is vague enough) . We can still provide the tool, but we will NOT run it until this is resolved.

[haikoschol]

If two packages are affected by the same CVE, doesn't this check cause the second one to be skipped entirely? And didn't this issue come up before somewhere? It seems familiar...

[sbs2001]

You are correct, I remember vaguely, that the code was violating constraints which was temporarily fixed by removing the summary. We need some concrete way to deal with this. Some pointers to duplicate(not exactly) data https://github.com/pyupio/safety-db/blob/b873cceee96c04c4e9df93d17087592e94290482/data/insecure_full.json#L247 and https://github.com/pyupio/safety-db/blob/b873cceee96c04c4e9df93d17087592e94290482/data/insecure_full.json#L256

[haikoschol]

Let's merge it as is and refine it later.

[haikoschol]

Let's merge it as is and refine it later.