Enhancement request: Track product "lifecycle"

[pombredanne]

It would be great to support lifecycle events at the product level.

For instance, when I have a portfolio of products and product releases:

• some products are end-of-life
• some versions may be end-of-support

... And so on.

This is important for vulnerability management: if a product is no longer supported, I will not want to manage vulnerabilities the same as for a supported product (or may ignore these entirely)

There is a project at CycloneDX for common lifecycle events that may be of interest for this domain.

[DennisClark]

Perhaps this can be addressed by enhancing the existing Product Status table, which has been under-utilized. See attached screenshot. DejaCode users are welcome to define and create Product Status values that are meaningful to their product lifecycle processes.

We could add a new indicator to each entry, something like no_vulnerability_tracking (defaulting to false/unchecked) to provide a control in the vulnerability setting process to skip a product with such a Status.