“Today, we are excited to announce that the GitHub Advisory Database is now open to community contributions!”
Anyone can now submit fixes to the vulnerability data behind Dependabot and npm audit, and the data carries a Creative Commons license. That’s good for open source. It’s also free help for the database GitHub calls the foundation of its supply chain security business. Microsoft gets the corrections, and the volunteers get a thank-you.