[tsteenbe]

Good catch I missed that openCVE is Business Source License which I actually do not consider to be open source.

[cpach]

I agree. If it doesn’t follow the Debian Free Software Guidelines then I wouldn’t call it open source.

https://en.m.wikipedia.org/wiki/Debian_Free_Software_Guideli...