8b8eaafa1f
Go engine that aggregates cybersecurity news and enriches CVEs. This first commit lays the M0 foundation: - config: fetch/enrich/cluster/rank/AI settings, YAML + validation, defaults as named constants, AI opt-in and off by default - source: Source registry with embedded default feeds (7 verified RSS sources), external-file override, dedup/URL validation - store: pure-Go SQLite (modernc), WAL + foreign_keys, forward-only embedded migrations with schema_migrations tracking and a loud newer-than-binary guard; ErrDuplicate sentinel for dedup - cmd: cobra skeleton, version + sources wired, remaining commands stubbed to their milestones go vet / gofmt / go test all clean. |
||
|---|---|---|
| .. | ||
| cmd/nadezhda | ||
| internal | ||
| .gitignore | ||
| README.md | ||
| go.mod | ||
| go.sum | ||
| justfile | ||
README.md
Nadezhda
A concurrent security-news and CVE aggregation engine, written in Go.
Nadezhda ingests cybersecurity news from reliable RSS feeds, enriches every referenced CVE with authoritative exploit intelligence (NVD, CISA KEV, FIRST EPSS), clusters the same story across outlets, ranks items by real-world significance, and surfaces content angles. It ships as a single static binary with a local SQLite store, a colorful terminal UI, and Markdown/JSON export.
Status
Early development. The scaffold is in place: configuration, source registry, SQLite store with forward-only migrations, and the command skeleton.
nadezhda version # print version
nadezhda sources # list configured feeds and persist them to the store
Ingestion, CVE enrichment, ranking, the TUI, and the AI ideation layer land in subsequent milestones.
Build
just build # -> ./nadezhda
just test
Requires Go 1.25+.
Full documentation lands in learn/ as the project matures.