How do we get range

[celek ibm]

Hello, 

I am looking at 

```

select * from vuln where links like '%CVE-2023-39331%' and package_name = 'npm'

```

I noticed non of them have range, yes OSV and CVE do

https://api.osv.dev/v1/vulns/CVE-2023-39331

https://nvd.nist.gov/vuln/detail/CVE-2023-39331

Is my updater not pulling the right info to get the range ?

Thanks

[Hank Donnay]

On Wed, Jan 10, 2024 at 12:02:54PM -0800, celek ibm wrote:
>https://api.osv.dev/v1/vulns/CVE-2023-39331

This is of type "git", which is unusable for Clair's purposes. Commit
IDs are not orderable without a clone of the repository. Furthermore,
there's no standard way to map packages and commits.

--
hank