VersionDrift 0.1.0

The first release of VersionDrift: see how far your stack has drifted from upstream — your version, the latest one,
what changed in between, and a status per product (critical · end of life · update · up to date).

versiondrift.dev

• 77 products collected into a signed feed (minisign; sha256 for every product file), refreshed daily.
• A board in your browser — no account, your versions never leave it — with share links, compare pages
  (/p/:id/:a...:b), "is this version affected?" pages, RSS and a weekly "what shipped" view.
• Advisories from OSV, GitHub Security Advisories, NVD, the Debian Security Tracker and CISA KEV, matched to your
  version and release branch; end-of-life dates from endoflife.date.

Self-hosted

curl -fsSLO https://raw.githubusercontent.com/DamirManyapov/versiondrift/main/compose.yaml
docker compose up -d   # http://localhost:8080; the admin password is in `docker compose logs versiondrift`

• Image ghcr.io/damirmanyapov/versiondrift:0.1.0 (linux/amd64, linux/arm64), non-root, runs with a read-only root
  filesystem, a Helm chart in charts/versiondrift.
• Several boards and sites, sign-in by password, OIDC or a trusted proxy header; viewers and admins.
• A verified local copy of the feed served to your network, synced every two hours — or, without Internet access,
  updated from an offline package (versiondrift-feed.tar.gz, Settings → Feed).
• Hosts: follow products per host, or let the poller detect versions over SSH (Linux, RouterOS, Windows) and the
  Proxmox VE / PBS API, with access profiles whose secrets are sealed with the instance key.
• Alerts to Telegram, Mattermost, e-mail, ntfy, Gotify or a webhook when something becomes critical, reaches end of
  life or has a new release.

Adding a product

Products are YAML modules in products/ — see docs/10-contributing-modules.md.
Questions and ideas: Discussions.

Code under AGPL-3.0-only; product modules and the feed data under CC BY 4.0.