Package Ecosystem Panel

[Samk1710]

• Discuss and finalize list info graphics we want in the Ecosystem Analytics Panel in order to finalize the fields for related models and endpoints
• Create the Panel UI

This panel focuses on advisory to package relationship visualization and help identify gaps in that aspect.
Kindly leave your thoughts and recommend other charts you may have in mind in the comments.

Draft List:

1. Ecosystem Distribution Donut: Package count by ecosystem type from PackageV2.type

   • Shows overall ecosystem coverage in the database.

2. Namespace Distribution Donut with Ecosystem Filter: Top 10 namespaces by package count for a selected ecosystem from PackageV2.namespace

3. Affected vs Fixed Packages Grouped Bar Chart with Ecosystem Filter

   • Compares affected packages vs packages with known fixes per ecosystem.

4. Severity Distribution Scatter Plot

   • Shows advisory severity distribution.

   Ref: https://www.cvedetails.com/cvss-score-charts.php

5. Total Advisories vs Advisories without an Affected Package

   • Show absence of purl and vers mappings and possible need of Improvers

6. Ghost Packages per Importer/Advisory

-- (this one needs a little refinement, if you have any chart in mind to better visualize Ghost Package kindly leave your thoughts)

I have attached a sample metabase PoC below.

[Samk1710]

Sample Metabase PoC (with data from 5 importers)