1
0
mirror of synced 2025-12-19 18:06:02 -05:00

Add TL;DR and clarify when to fetch cve.json

Address Haiku feedback on T4 (EOL version query):
- Add TL;DR at top with key guidance for supported vs EOL versions
- Clarify that cve.json is only needed for CVSS vectors/CWE — month index
  _embedded.disclosures[] already has severity, titles, and fix commits

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Rich Lander
2025-12-12 10:41:55 -08:00
parent d703abc822
commit 2dc478639b

View File

@@ -2,6 +2,8 @@
Machine-readable .NET release, CVE, and compatibility data for AI assistants. Machine-readable .NET release, CVE, and compatibility data for AI assistants.
**TL;DR:** Fetch `llms.json` first. For supported versions, data is embedded. For EOL versions, follow `releases-index` → version → `latest-security`. Never construct URLs — follow `_links` only.
## Rules ## Rules
1. Follow `_links["..."].href` exactly — never construct URLs 1. Follow `_links["..."].href` exactly — never construct URLs
@@ -56,7 +58,7 @@ These shortcuts are the key to efficient navigation — use them to skip the roo
- `affected_releases`, `affected_products` - `affected_releases`, `affected_products`
- `fixes[]` with commit diff URLs (fetch diffs immediately — firewalls may block later) - `fixes[]` with commit diff URLs (fetch diffs immediately — firewalls may block later)
**For deep CVE analysis:** Follow `cve-json` link from month index for CVSS vectors, CWE, package version ranges. **For deep CVE analysis:** Follow `cve-json` link from month index for CVSS vectors, CWE, package version ranges. Only fetch `cve.json` if you need these details — the month index `_embedded.disclosures[]` has severity, titles, and fix commits.
The `prev-security` links skip non-security months and cross year boundaries automatically. The `prev-security` links skip non-security months and cross year boundaries automatically.