patchradar 2026.8.1__tar.gz

patchradar-2026.8.1/.github/workflows/publish.yml

@@ -0,0 +1,33 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  build-and-publish:
+    name: Build and publish to PyPI
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/patchradar
+    permissions:
+      id-token: write
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install build dependencies
+        run: pip install build hatchling
+
+      - name: Build package
+        run: python -m build
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1

patchradar-2026.8.1/.github/workflows/test.yml

@@ -0,0 +1,30 @@
+name: Tests
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: pip install -e .
+
+      - name: Test CLI
+        run: |
+          patchradar --help
+          patchradar list

patchradar-2026.8.1/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 maksimtech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

patchradar-2026.8.1/PKG-INFO

@@ -0,0 +1,135 @@
+Metadata-Version: 2.5
+Name: patchradar
+Version: 2026.8.1
+Summary: Realtime CVE intelligence for your software stack
+Project-URL: Homepage, https://github.com/maksimtech/patchradar
+Project-URL: Repository, https://github.com/maksimtech/patchradar
+Project-URL: Issues, https://github.com/maksimtech/patchradar/issues
+Author-email: maksimtech <github@maksimtech.com>
+License: MIT
+License-File: LICENSE
+Keywords: cve,monitoring,patch-tuesday,security,vulnerability
+Classifier: Development Status :: 3 - Alpha
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Security
+Classifier: Topic :: System :: Monitoring
+Requires-Python: >=3.11
+Requires-Dist: aiosqlite>=0.20.0
+Requires-Dist: apscheduler>=3.10.0
+Requires-Dist: fastapi>=0.115.0
+Requires-Dist: httpx>=0.28.0
+Requires-Dist: pydantic>=2.0.0
+Requires-Dist: rich>=13.0.0
+Requires-Dist: typer>=0.12.0
+Requires-Dist: uvicorn>=0.30.0
+Description-Content-Type: text/markdown
+
+# PatchRadar 🛡️
+
+> Know when your software is vulnerable — before attackers do.
+
+PatchRadar monitors CVE feeds in realtime and alerts you when a new vulnerability affects your software stack. No more manually checking NVD, MSRC, or Snyk — just add your software and let PatchRadar watch for you.
+
+![Python](https://img.shields.io/badge/python-3.11+-blue?style=flat-square)
+![CalVer](https://img.shields.io/badge/calver-2026.8.2-green?style=flat-square)
+![License](https://img.shields.io/badge/license-MIT-blue?style=flat-square)
+![PyPI](https://img.shields.io/pypi/v/patchradar?style=flat-square)
+
+---
+
+## ✨ Features
+
+- 🔍 **Realtime CVE monitoring** — scans NVD and other sources for new vulnerabilities
+- 📋 **Personal watchlist** — add any software you want to monitor
+- 🎨 **Beautiful web UI** — dark theme dashboard with charts and filters
+- 💻 **CLI first** — full command line interface for automation
+- 📊 **CVSS scoring** — color-coded severity (Critical / High / Medium / Low)
+- 💾 **Local SQLite** — all data stored locally, no cloud, no account needed
+- 🐍 **Python 3.11+** — modern async architecture with httpx and FastAPI
+
+---
+
+## 🚀 Installation
+
+```bash
+pip install patchradar
+```
+
+---
+
+## 📖 Usage
+
+### CLI
+
+```bash
+# Add software to your watchlist
+patchradar add proxmox
+patchradar add bitwarden
+patchradar add "windows 10"
+
+# Show your watchlist
+patchradar list
+
+# Scan for CVEs (last 30 days)
+patchradar scan --days 30
+
+# Show latest CVEs in terminal
+patchradar status
+
+# Remove software
+patchradar remove proxmox
+```
+
+### Web UI
+
+```bash
+patchradar serve
+# Open http://localhost:8000
+```
+
+---
+
+## 📡 Sources
+
+| Source | Type | Status |
+|--------|------|--------|
+| [NVD](https://nvd.nist.gov) | CVE Database | ✅ Active |
+| MSRC | Microsoft Security | 🔜 Coming soon |
+| Snyk | Package vulnerabilities | 🔜 Coming soon |
+| Debian Security | Linux packages | 🔜 Coming soon |
+
+---
+
+## 🗓️ Versioning
+
+PatchRadar uses [CalVer](https://calver.org) — `YYYY.MM.PATCH`.
+
+| Version | Date | Notes |
+|---------|------|-------|
+| 2026.8.2 | 2026-08-14 | Web UI added |
+| 2026.8.1 | 2026-08-14 | Initial release |
+
+---
+
+## 🤝 Contributing
+
+Contributions are welcome! Feel free to open issues or pull requests.
+
+---
+
+## 📄 License
+
+MIT — see [LICENSE](LICENSE) for details.
+
+---
+
+<div align="center">
+Built with ❤️ by <a href="https://github.com/maksimtech">maksimtech</a>
+</div>

patchradar-2026.8.1/README.md

@@ -0,0 +1,102 @@
+# PatchRadar 🛡️
+
+> Know when your software is vulnerable — before attackers do.
+
+PatchRadar monitors CVE feeds in realtime and alerts you when a new vulnerability affects your software stack. No more manually checking NVD, MSRC, or Snyk — just add your software and let PatchRadar watch for you.
+
+![Python](https://img.shields.io/badge/python-3.11+-blue?style=flat-square)
+![CalVer](https://img.shields.io/badge/calver-2026.8.2-green?style=flat-square)
+![License](https://img.shields.io/badge/license-MIT-blue?style=flat-square)
+![PyPI](https://img.shields.io/pypi/v/patchradar?style=flat-square)
+
+---
+
+## ✨ Features
+
+- 🔍 **Realtime CVE monitoring** — scans NVD and other sources for new vulnerabilities
+- 📋 **Personal watchlist** — add any software you want to monitor
+- 🎨 **Beautiful web UI** — dark theme dashboard with charts and filters
+- 💻 **CLI first** — full command line interface for automation
+- 📊 **CVSS scoring** — color-coded severity (Critical / High / Medium / Low)
+- 💾 **Local SQLite** — all data stored locally, no cloud, no account needed
+- 🐍 **Python 3.11+** — modern async architecture with httpx and FastAPI
+
+---
+
+## 🚀 Installation
+
+```bash
+pip install patchradar
+```
+
+---
+
+## 📖 Usage
+
+### CLI
+
+```bash
+# Add software to your watchlist
+patchradar add proxmox
+patchradar add bitwarden
+patchradar add "windows 10"
+
+# Show your watchlist
+patchradar list
+
+# Scan for CVEs (last 30 days)
+patchradar scan --days 30
+
+# Show latest CVEs in terminal
+patchradar status
+
+# Remove software
+patchradar remove proxmox
+```
+
+### Web UI
+
+```bash
+patchradar serve
+# Open http://localhost:8000
+```
+
+---
+
+## 📡 Sources
+
+| Source | Type | Status |
+|--------|------|--------|
+| [NVD](https://nvd.nist.gov) | CVE Database | ✅ Active |
+| MSRC | Microsoft Security | 🔜 Coming soon |
+| Snyk | Package vulnerabilities | 🔜 Coming soon |
+| Debian Security | Linux packages | 🔜 Coming soon |
+
+---
+
+## 🗓️ Versioning
+
+PatchRadar uses [CalVer](https://calver.org) — `YYYY.MM.PATCH`.
+
+| Version | Date | Notes |
+|---------|------|-------|
+| 2026.8.2 | 2026-08-14 | Web UI added |
+| 2026.8.1 | 2026-08-14 | Initial release |
+
+---
+
+## 🤝 Contributing
+
+Contributions are welcome! Feel free to open issues or pull requests.
+
+---
+
+## 📄 License
+
+MIT — see [LICENSE](LICENSE) for details.
+
+---
+
+<div align="center">
+Built with ❤️ by <a href="https://github.com/maksimtech">maksimtech</a>
+</div>

patchradar-2026.8.1/pyproject.toml

@@ -0,0 +1,49 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "patchradar"
+version = "2026.8.1"
+description = "Realtime CVE intelligence for your software stack"
+readme = "README.md"
+license = {text = "MIT"}
+requires-python = ">=3.11"
+authors = [
+    {name = "maksimtech", email = "github@maksimtech.com"}
+]
+keywords = ["cve", "security", "vulnerability", "monitoring", "patch-tuesday"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Environment :: Console",
+    "Intended Audience :: Developers",
+    "Intended Audience :: System Administrators",
+    "License :: OSI Approved :: MIT License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Topic :: Security",
+    "Topic :: System :: Monitoring",
+]
+dependencies = [
+    "httpx>=0.28.0",
+    "fastapi>=0.115.0",
+    "uvicorn>=0.30.0",
+    "typer>=0.12.0",
+    "rich>=13.0.0",
+    "pydantic>=2.0.0",
+    "apscheduler>=3.10.0",
+    "aiosqlite>=0.20.0",
+]
+
+[project.scripts]
+patchradar = "patchradar.cli:main"
+
+[project.urls]
+Homepage = "https://github.com/maksimtech/patchradar"
+Repository = "https://github.com/maksimtech/patchradar"
+Issues = "https://github.com/maksimtech/patchradar/issues"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/patchradar"]

patchradar-2026.8.1/src/patchradar/api/main.py

@@ -0,0 +1,78 @@
+from fastapi import FastAPI
+from fastapi.staticfiles import StaticFiles
+from fastapi.responses import HTMLResponse
+from pathlib import Path
+from patchradar.db.database import (
+    init_db, get_watchlist, add_to_watchlist,
+    remove_from_watchlist, get_cves
+)
+from patchradar.collectors.nvd import fetch_cves as nvd_fetch
+import asyncio
+
+app = FastAPI(title="PatchRadar", version="2026.8.1")
+
+@app.on_event("startup")
+async def startup():
+    await init_db()
+
+@app.get("/api/watchlist")
+async def api_watchlist():
+    items = await get_watchlist()
+    return {"watchlist": items}
+
+@app.post("/api/watchlist/{software}")
+async def api_add(software: str):
+    added = await add_to_watchlist(software)
+    return {"added": added, "software": software}
+
+@app.delete("/api/watchlist/{software}")
+async def api_remove(software: str):
+    removed = await remove_from_watchlist(software)
+    return {"removed": removed, "software": software}
+
+@app.get("/api/cves")
+async def api_cves(software: str = None, limit: int = 50):
+    cves = await get_cves(software=software, limit=limit)
+    return {"cves": cves, "total": len(cves)}
+
+@app.post("/api/scan")
+async def api_scan(days: int = 7):
+    from patchradar.db.database import save_cve
+    watchlist = await get_watchlist()
+    total = 0
+    results = {}
+    for sw in watchlist:
+        cves = await nvd_fetch(sw, days_back=days)
+        for cve in cves:
+            await save_cve(cve)
+        results[sw] = len(cves)
+        total += len(cves)
+    return {"total": total, "by_software": results}
+
+@app.get("/api/stats")
+async def api_stats():
+    from patchradar.db.database import DB_PATH
+    import aiosqlite
+    async with aiosqlite.connect(DB_PATH) as db:
+        async with db.execute("SELECT COUNT(*) FROM cves") as cur:
+            total = (await cur.fetchone())[0]
+        async with db.execute(
+            "SELECT severity, COUNT(*) FROM cves GROUP BY severity"
+        ) as cur:
+            by_severity = dict(await cur.fetchall())
+        async with db.execute(
+            "SELECT software, COUNT(*) FROM cves GROUP BY software ORDER BY COUNT(*) DESC"
+        ) as cur:
+            by_software = dict(await cur.fetchall())
+    watchlist = await get_watchlist()
+    return {
+        "total_cves": total,
+        "watched": len(watchlist),
+        "by_severity": by_severity,
+        "by_software": by_software,
+    }
+
+@app.get("/", response_class=HTMLResponse)
+async def index():
+    html_path = Path(__file__).parent / "templates" / "index.html"
+    return HTMLResponse(content=html_path.read_text())

patchradar-2026.8.1/src/patchradar/api/templates/index.html

@@ -0,0 +1,334 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>PatchRadar 🛡️</title>
+<style>
+  * { margin: 0; padding: 0; box-sizing: border-box; }
+  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif; background: #0d1117; color: #e6edf3; min-height: 100vh; }
+  header { background: #161b22; border-bottom: 1px solid #30363d; padding: 1rem 2rem; display: flex; align-items: center; gap: 1rem; }
+  header h1 { font-size: 1.4rem; font-weight: 600; }
+  header span { font-size: 1.5rem; }
+  .badge { background: #238636; color: #fff; font-size: 0.7rem; padding: 2px 8px; border-radius: 20px; font-weight: 600; }
+  main { padding: 2rem; max-width: 1400px; margin: 0 auto; }
+  .stats-grid { display: grid; grid-template-columns: repeat(auto-fit, minmax(180px, 1fr)); gap: 1rem; margin-bottom: 2rem; }
+  .stat-card { background: #161b22; border: 1px solid #30363d; border-radius: 8px; padding: 1.2rem; }
+  .stat-card .label { font-size: 0.75rem; color: #8b949e; text-transform: uppercase; letter-spacing: 0.05em; margin-bottom: 0.5rem; }
+  .stat-card .value { font-size: 2rem; font-weight: 700; }
+  .stat-card.critical .value { color: #f85149; }
+  .stat-card.high .value { color: #e3b341; }
+  .stat-card.medium .value { color: #d29922; }
+  .stat-card.low .value { color: #3fb950; }
+  .stat-card.total .value { color: #58a6ff; }
+  .grid { display: grid; grid-template-columns: 300px 1fr; gap: 1.5rem; }
+  .panel { background: #161b22; border: 1px solid #30363d; border-radius: 8px; padding: 1.5rem; }
+  .panel h2 { font-size: 1rem; font-weight: 600; margin-bottom: 1rem; color: #e6edf3; }
+  .watchlist-item { display: flex; align-items: center; justify-content: space-between; padding: 0.6rem 0.8rem; border-radius: 6px; margin-bottom: 0.4rem; background: #0d1117; border: 1px solid #30363d; }
+  .watchlist-item span { font-size: 0.9rem; }
+  .btn-remove { background: none; border: none; color: #f85149; cursor: pointer; font-size: 1rem; padding: 2px 6px; border-radius: 4px; }
+  .btn-remove:hover { background: #2d1316; }
+  .add-form { display: flex; gap: 0.5rem; margin-top: 1rem; }
+  .add-form input { flex: 1; background: #0d1117; border: 1px solid #30363d; border-radius: 6px; padding: 0.5rem 0.8rem; color: #e6edf3; font-size: 0.9rem; outline: none; }
+  .add-form input:focus { border-color: #58a6ff; }
+  .btn { padding: 0.5rem 1rem; border-radius: 6px; border: none; cursor: pointer; font-size: 0.85rem; font-weight: 600; transition: opacity 0.2s; }
+  .btn:hover { opacity: 0.85; }
+  .btn-primary { background: #238636; color: #fff; }
+  .btn-scan { background: #1f6feb; color: #fff; width: 100%; margin-top: 1rem; padding: 0.7rem; }
+  .filters { display: flex; gap: 0.5rem; margin-bottom: 1rem; flex-wrap: wrap; }
+  .filter-btn { padding: 0.3rem 0.8rem; border-radius: 20px; border: 1px solid #30363d; background: #0d1117; color: #8b949e; cursor: pointer; font-size: 0.8rem; }
+  .filter-btn.active { border-color: #58a6ff; color: #58a6ff; background: #0c2d6b; }
+  .filter-btn.critical.active { border-color: #f85149; color: #f85149; background: #2d1316; }
+  .filter-btn.high.active { border-color: #e3b341; color: #e3b341; background: #2d2005; }
+  .filter-btn.medium.active { border-color: #d29922; color: #d29922; background: #2d1f00; }
+  .filter-btn.low.active { border-color: #3fb950; color: #3fb950; background: #0d2b1a; }
+  table { width: 100%; border-collapse: collapse; font-size: 0.85rem; }
+  th { text-align: left; padding: 0.6rem 0.8rem; color: #8b949e; font-weight: 600; font-size: 0.75rem; text-transform: uppercase; border-bottom: 1px solid #30363d; }
+  td { padding: 0.7rem 0.8rem; border-bottom: 1px solid #21262d; vertical-align: top; }
+  tr:hover td { background: #1c2128; }
+  .severity-badge { display: inline-block; padding: 2px 8px; border-radius: 20px; font-size: 0.72rem; font-weight: 700; }
+  .sev-CRITICAL { background: #2d1316; color: #f85149; }
+  .sev-HIGH { background: #2d2005; color: #e3b341; }
+  .sev-MEDIUM { background: #2d1f00; color: #d29922; }
+  .sev-LOW { background: #0d2b1a; color: #3fb950; }
+  .sev-UNKNOWN { background: #21262d; color: #8b949e; }
+  .score { font-weight: 700; }
+  .score.critical { color: #f85149; }
+  .score.high { color: #e3b341; }
+  .score.medium { color: #d29922; }
+  .score.low { color: #3fb950; }
+  .cve-link { color: #58a6ff; text-decoration: none; font-family: monospace; }
+  .cve-link:hover { text-decoration: underline; }
+  .desc { color: #8b949e; max-width: 400px; }
+  .source-badge { font-size: 0.7rem; background: #21262d; padding: 2px 6px; border-radius: 4px; color: #8b949e; }
+  .scanning { opacity: 0.6; }
+  .toast { position: fixed; bottom: 2rem; right: 2rem; background: #238636; color: #fff; padding: 0.8rem 1.2rem; border-radius: 8px; font-size: 0.9rem; display: none; z-index: 100; }
+  .empty { text-align: center; padding: 3rem; color: #8b949e; }
+  .chart-container { margin-top: 1rem; }
+  .chart-bar { display: flex; align-items: center; gap: 0.8rem; margin-bottom: 0.6rem; }
+  .chart-bar .label { width: 80px; font-size: 0.8rem; color: #8b949e; text-align: right; }
+  .chart-bar .bar-wrap { flex: 1; background: #21262d; border-radius: 4px; height: 20px; overflow: hidden; }
+  .chart-bar .bar { height: 100%; border-radius: 4px; transition: width 0.5s ease; display: flex; align-items: center; padding-left: 8px; font-size: 0.75rem; font-weight: 600; }
+  .bar-critical { background: #f85149; }
+  .bar-high { background: #e3b341; }
+  .bar-medium { background: #d29922; }
+  .bar-low { background: #3fb950; }
+  .bar-unknown { background: #8b949e; }
+  .spinner { display: inline-block; width: 14px; height: 14px; border: 2px solid #fff3; border-top-color: #fff; border-radius: 50%; animation: spin 0.8s linear infinite; margin-right: 6px; }
+  @keyframes spin { to { transform: rotate(360deg); } }
+</style>
+</head>
+<body>
+<header>
+  <span>🛡️</span>
+  <h1>PatchRadar</h1>
+  <span class="badge">2026.8.1</span>
+</header>
+
+<main>
+  <!-- Stats -->
+  <div class="stats-grid" id="stats-grid">
+    <div class="stat-card total"><div class="label">Total CVEs</div><div class="value" id="stat-total">—</div></div>
+    <div class="stat-card critical"><div class="label">Critical</div><div class="value" id="stat-critical">—</div></div>
+    <div class="stat-card high"><div class="label">High</div><div class="value" id="stat-high">—</div></div>
+    <div class="stat-card medium"><div class="label">Medium</div><div class="value" id="stat-medium">—</div></div>
+    <div class="stat-card low"><div class="label">Low</div><div class="value" id="stat-low">—</div></div>
+    <div class="stat-card total"><div class="label">Watching</div><div class="value" id="stat-watched">—</div></div>
+  </div>
+
+  <div class="grid">
+    <!-- Watchlist -->
+    <div>
+      <div class="panel">
+        <h2>📋 Watchlist</h2>
+        <div id="watchlist-items"></div>
+        <div class="add-form">
+          <input type="text" id="add-input" placeholder="Add software..." onkeydown="if(event.key==='Enter')addSoftware()">
+          <button class="btn btn-primary" onclick="addSoftware()">Add</button>
+        </div>
+        <button class="btn btn-scan" id="scan-btn" onclick="scanAll()">🔍 Scan All</button>
+      </div>
+
+      <!-- Chart -->
+      <div class="panel" style="margin-top: 1rem;">
+        <h2>📊 By Severity</h2>
+        <div class="chart-container" id="severity-chart"></div>
+      </div>
+
+      <!-- By Software -->
+      <div class="panel" style="margin-top: 1rem;">
+        <h2>📦 By Software</h2>
+        <div class="chart-container" id="software-chart"></div>
+      </div>
+    </div>
+
+    <!-- CVE Table -->
+    <div class="panel">
+      <h2>🚨 CVEs</h2>
+      <div class="filters">
+        <button class="filter-btn active" onclick="setFilter('ALL', this)">All</button>
+        <button class="filter-btn critical" onclick="setFilter('CRITICAL', this)">Critical</button>
+        <button class="filter-btn high" onclick="setFilter('HIGH', this)">High</button>
+        <button class="filter-btn medium" onclick="setFilter('MEDIUM', this)">Medium</button>
+        <button class="filter-btn low" onclick="setFilter('LOW', this)">Low</button>
+      </div>
+      <div id="cve-table-wrap">
+        <div class="empty">Run a scan to see CVEs</div>
+      </div>
+    </div>
+  </div>
+</main>
+
+<div class="toast" id="toast"></div>
+
+<script>
+let allCves = [];
+let currentFilter = 'ALL';
+
+async function api(path, method='GET', body=null) {
+  const opts = { method, headers: {'Content-Type': 'application/json'} };
+  if (body) opts.body = JSON.stringify(body);
+  const r = await fetch(path, opts);
+  return r.json();
+}
+
+function toast(msg, color='#238636') {
+  const t = document.getElementById('toast');
+  t.textContent = msg;
+  t.style.background = color;
+  t.style.display = 'block';
+  setTimeout(() => t.style.display = 'none', 3000);
+}
+
+async function loadWatchlist() {
+  const data = await api('/api/watchlist');
+  const el = document.getElementById('watchlist-items');
+  if (!data.watchlist.length) {
+    el.innerHTML = '<div style="color:#8b949e;font-size:0.85rem;padding:0.5rem 0">No software added yet</div>';
+    return;
+  }
+  el.innerHTML = data.watchlist.map(sw => `
+    <div class="watchlist-item">
+      <span>📦 ${sw}</span>
+      <button class="btn-remove" onclick="removeSoftware('${sw}')" title="Remove">✕</button>
+    </div>
+  `).join('');
+}
+
+async function addSoftware() {
+  const input = document.getElementById('add-input');
+  const sw = input.value.trim();
+  if (!sw) return;
+  const data = await api(`/api/watchlist/${encodeURIComponent(sw)}`, 'POST');
+  if (data.added) {
+    toast(`✅ Added ${sw}`);
+    input.value = '';
+    await loadWatchlist();
+    await loadStats();
+  } else {
+    toast(`⚠️ ${sw} already in watchlist`, '#d29922');
+  }
+}
+
+async function removeSoftware(sw) {
+  await api(`/api/watchlist/${encodeURIComponent(sw)}`, 'DELETE');
+  toast(`🗑️ Removed ${sw}`, '#f85149');
+  await loadWatchlist();
+  await loadStats();
+  await loadCves();
+}
+
+async function scanAll() {
+  const btn = document.getElementById('scan-btn');
+  btn.innerHTML = '<span class="spinner"></span>Scanning...';
+  btn.disabled = true;
+  try {
+    const data = await api('/api/scan?days=30', 'POST');
+    toast(`✅ Found ${data.total} CVEs`);
+    await loadCves();
+    await loadStats();
+  } finally {
+    btn.innerHTML = '🔍 Scan All';
+    btn.disabled = false;
+  }
+}
+
+async function loadCves() {
+  const data = await api('/api/cves?limit=200');
+  allCves = data.cves;
+  renderTable();
+}
+
+function setFilter(severity, btn) {
+  currentFilter = severity;
+  document.querySelectorAll('.filter-btn').forEach(b => b.classList.remove('active'));
+  btn.classList.add('active');
+  renderTable();
+}
+
+function severityClass(s) {
+  const m = {'CRITICAL':'critical','HIGH':'high','MEDIUM':'medium','LOW':'low'};
+  return m[(s||'').toUpperCase()] || '';
+}
+
+function scoreClass(score) {
+  if (!score) return '';
+  if (score >= 9.0) return 'critical';
+  if (score >= 7.0) return 'high';
+  if (score >= 4.0) return 'medium';
+  return 'low';
+}
+
+function renderTable() {
+  const filtered = currentFilter === 'ALL'
+    ? allCves
+    : allCves.filter(c => (c.severity||'').toUpperCase() === currentFilter);
+
+  const wrap = document.getElementById('cve-table-wrap');
+  if (!filtered.length) {
+    wrap.innerHTML = '<div class="empty">No CVEs found. Run a scan first.</div>';
+    return;
+  }
+
+  wrap.innerHTML = `
+    <table>
+      <thead>
+        <tr>
+          <th>CVE ID</th>
+          <th>Software</th>
+          <th>Score</th>
+          <th>Severity</th>
+          <th>Description</th>
+          <th>Source</th>
+          <th>Published</th>
+        </tr>
+      </thead>
+      <tbody>
+        ${filtered.map(cve => `
+          <tr>
+            <td><a class="cve-link" href="${cve.url||'#'}" target="_blank">${cve.id}</a></td>
+            <td><span class="source-badge">${cve.software||''}</span></td>
+            <td><span class="score ${scoreClass(cve.cvss_score)}">${cve.cvss_score ? cve.cvss_score.toFixed(1) : 'N/A'}</span></td>
+            <td><span class="severity-badge sev-${(cve.severity||'UNKNOWN').toUpperCase()}">${cve.severity||'UNKNOWN'}</span></td>
+            <td class="desc">${(cve.description||'').substring(0, 120)}${(cve.description||'').length > 120 ? '...' : ''}</td>
+            <td><span class="source-badge">${cve.source||''}</span></td>
+            <td style="color:#8b949e;font-size:0.8rem">${cve.published_at ? cve.published_at.substring(0,10) : ''}</td>
+          </tr>
+        `).join('')}
+      </tbody>
+    </table>
+  `;
+}
+
+async function loadStats() {
+  const data = await api('/api/stats');
+  document.getElementById('stat-total').textContent = data.total_cves;
+  document.getElementById('stat-watched').textContent = data.watched;
+  const sev = data.by_severity || {};
+  document.getElementById('stat-critical').textContent = sev['CRITICAL'] || 0;
+  document.getElementById('stat-high').textContent = sev['HIGH'] || 0;
+  document.getElementById('stat-medium').textContent = sev['MEDIUM'] || 0;
+  document.getElementById('stat-low').textContent = sev['LOW'] || 0;
+
+  const total = data.total_cves || 1;
+  const sevOrder = ['CRITICAL','HIGH','MEDIUM','LOW','UNKNOWN'];
+  const sevColors = {'CRITICAL':'critical','HIGH':'high','MEDIUM':'medium','LOW':'low','UNKNOWN':'unknown'};
+  document.getElementById('severity-chart').innerHTML = sevOrder
+    .filter(s => sev[s])
+    .map(s => `
+      <div class="chart-bar">
+        <div class="label">${s}</div>
+        <div class="bar-wrap">
+          <div class="bar bar-${sevColors[s]}" style="width:${Math.round((sev[s]/total)*100)}%">
+            ${sev[s]}
+          </div>
+        </div>
+      </div>
+    `).join('');
+
+  const bySw = data.by_software || {};
+  const maxSw = Math.max(...Object.values(bySw), 1);
+  document.getElementById('software-chart').innerHTML = Object.entries(bySw)
+    .sort((a,b) => b[1]-a[1])
+    .map(([sw, count]) => `
+      <div class="chart-bar">
+        <div class="label">${sw}</div>
+        <div class="bar-wrap">
+          <div class="bar bar-high" style="width:${Math.round((count/maxSw)*100)}%">
+            ${count}
+          </div>
+        </div>
+      </div>
+    `).join('');
+}
+
+async function init() {
+  await loadWatchlist();
+  await loadStats();
+  await loadCves();
+}
+
+init();
+</script>
+</body>
+</html>

patchradar-2026.8.1/src/patchradar/cli.py

@@ -0,0 +1,173 @@
+import typer
+import asyncio
+from rich.console import Console
+from rich.table import Table
+from rich import box
+from rich.text import Text
+from patchradar.db.database import (
+    init_db, add_to_watchlist, get_watchlist,
+    remove_from_watchlist, get_cves, save_cve
+)
+from patchradar.collectors.nvd import fetch_cves
+
+app = typer.Typer(
+    name="patchradar",
+    help="Realtime CVE intelligence for your software stack 🛡️",
+    add_completion=False,
+)
+console = Console()
+
+def run(coro):
+    return asyncio.run(coro)
+
+@app.callback()
+def startup():
+    run(init_db())
+
+@app.command()
+def add(software: str = typer.Argument(..., help="Software to monitor")):
+    """Add software to your watchlist."""
+    added = run(add_to_watchlist(software))
+    if added:
+        console.print(f"✅ [green]Added[/green] [bold]{software}[/bold] to watchlist")
+    else:
+        console.print(f"⚠️  [yellow]{software}[/yellow] is already in your watchlist")
+
+@app.command()
+def remove(software: str = typer.Argument(..., help="Software to remove")):
+    """Remove software from your watchlist."""
+    removed = run(remove_from_watchlist(software))
+    if removed:
+        console.print(f"🗑️  [red]Removed[/red] [bold]{software}[/bold] from watchlist")
+    else:
+        console.print(f"❌ [red]{software}[/red] not found in watchlist")
+
+@app.command(name="list")
+def list_watchlist():
+    """Show your current watchlist."""
+    items = run(get_watchlist())
+    if not items:
+        console.print("📭 Your watchlist is empty. Use [bold]patchradar add <software>[/bold]")
+        return
+    table = Table(title="🛡️ PatchRadar Watchlist", box=box.ROUNDED)
+    table.add_column("Software", style="cyan bold")
+    for item in items:
+        table.add_row(item)
+    console.print(table)
+
+@app.command()
+def scan(
+    software: str = typer.Argument(None, help="Software to scan (or all watchlist)"),
+    days: int = typer.Option(7, "--days", "-d", help="Days back to search"),
+):
+    """Scan for CVEs affecting your software."""
+    async def _scan():
+        targets = [software] if software else await get_watchlist()
+        if not targets:
+            console.print("📭 Nothing to scan. Add software with [bold]patchradar add[/bold]")
+            return
+
+        total = 0
+        for target in targets:
+            with console.status(f"[cyan]Scanning {target}...[/cyan]"):
+                cves = await fetch_cves(target, days_back=days)
+
+            for cve in cves:
+                await save_cve(cve)
+
+            total += len(cves)
+            if cves:
+                _print_cves(target, cves)
+            else:
+                console.print(f"✅ [green]{target}[/green] — no CVEs found in last {days} days")
+
+        console.print(f"\n📊 Total: [bold]{total}[/bold] CVEs found")
+
+    run(_scan())
+
+@app.command()
+def status():
+    """Show latest CVEs from your watchlist."""
+    async def _status():
+        cves = await get_cves(limit=20)
+        if not cves:
+            console.print("📭 No CVEs in database yet. Run [bold]patchradar scan[/bold]")
+            return
+        _print_cves_table(cves)
+    run(_status())
+
+def _print_cves(software: str, cves: list):
+    table = Table(
+        title=f"🚨 CVEs for [bold]{software}[/bold]",
+        box=box.ROUNDED,
+        show_lines=True
+    )
+    table.add_column("CVE ID", style="bold cyan", no_wrap=True)
+    table.add_column("Score", justify="center", width=6)
+    table.add_column("Severity", justify="center", width=10)
+    table.add_column("Description", max_width=60)
+
+    for cve in cves:
+        score = cve.get("cvss_score")
+        severity = cve.get("severity", "UNKNOWN")
+        score_str = f"{score:.1f}" if score else "N/A"
+        severity_color = {
+            "CRITICAL": "red bold",
+            "HIGH": "red",
+            "MEDIUM": "yellow",
+            "LOW": "green",
+        }.get(severity.upper(), "white")
+
+        table.add_row(
+            cve["id"],
+            score_str,
+            Text(severity, style=severity_color),
+            cve.get("description", "")[:120] + "..." if len(cve.get("description", "")) > 120 else cve.get("description", ""),
+        )
+    console.print(table)
+
+def _print_cves_table(cves: list):
+    table = Table(title="🛡️ PatchRadar — Latest CVEs", box=box.ROUNDED, show_lines=True)
+    table.add_column("CVE ID", style="bold cyan", no_wrap=True)
+    table.add_column("Software", style="blue")
+    table.add_column("Score", justify="center", width=6)
+    table.add_column("Severity", justify="center", width=10)
+    table.add_column("Source", width=6)
+
+    for cve in cves:
+        score = cve.get("cvss_score")
+        severity = cve.get("severity", "UNKNOWN")
+        score_str = f"{score:.1f}" if score else "N/A"
+        severity_color = {
+            "CRITICAL": "red bold",
+            "HIGH": "red",
+            "MEDIUM": "yellow",
+            "LOW": "green",
+        }.get(severity.upper(), "white")
+
+        table.add_row(
+            cve["id"],
+            cve.get("software", ""),
+            score_str,
+            Text(severity, style=severity_color),
+            cve.get("source", ""),
+        )
+    console.print(table)
+
+
+@app.command()
+def serve(
+    host: str = typer.Option("127.0.0.1", "--host", "-h"),
+    port: int = typer.Option(8000, "--port", "-p"),
+):
+    """Launch the PatchRadar web UI."""
+    import uvicorn
+    console.print(f"🛡️  [bold]PatchRadar[/bold] UI → [cyan]http://{host}:{port}[/cyan]")
+    uvicorn.run("patchradar.api.main:app", host=host, port=port, reload=False)
+
+
+def main():
+    app()
+
+if __name__ == "__main__":
+    main()

patchradar-2026.8.1/src/patchradar/collectors/nvd.py

@@ -0,0 +1,66 @@
+import httpx
+from datetime import datetime, timedelta
+
+NVD_API = "https://services.nvd.nist.gov/rest/json/cves/2.0"
+
+async def fetch_cves(keyword: str, days_back: int = 7) -> list[dict]:
+    """Fetch CVEs from NVD for a given keyword."""
+    start = (datetime.utcnow() - timedelta(days=days_back)).strftime(
+        "%Y-%m-%dT00:00:00.000"
+    )
+    end = datetime.utcnow().strftime("%Y-%m-%dT23:59:59.999")
+
+    params = {
+        "keywordSearch": keyword,
+        "pubStartDate": start,
+        "pubEndDate": end,
+        "resultsPerPage": 50,
+    }
+
+    async with httpx.AsyncClient(timeout=30.0) as client:
+        try:
+            response = await client.get(NVD_API, params=params)
+            response.raise_for_status()
+            data = response.json()
+        except Exception as e:
+            return []
+
+    results = []
+    for item in data.get("vulnerabilities", []):
+        cve = item.get("cve", {})
+        cve_id = cve.get("id", "")
+
+        # Descrizione inglese
+        descriptions = cve.get("descriptions", [])
+        description = next(
+            (d["value"] for d in descriptions if d["lang"] == "en"), ""
+        )
+
+        # CVSS score
+        cvss_score = None
+        cvss_version = None
+        severity = "UNKNOWN"
+        metrics = cve.get("metrics", {})
+
+        for version in ["cvssMetricV40", "cvssMetricV31", "cvssMetricV30", "cvssMetricV2"]:
+            if version in metrics and metrics[version]:
+                m = metrics[version][0]
+                cvss_data = m.get("cvssData", {})
+                cvss_score = cvss_data.get("baseScore")
+                cvss_version = cvss_data.get("version")
+                severity = m.get("baseSeverity", cvss_data.get("baseSeverity", "UNKNOWN"))
+                break
+
+        results.append({
+            "id": cve_id,
+            "software": keyword.lower(),
+            "description": description,
+            "cvss_score": cvss_score,
+            "cvss_version": cvss_version,
+            "severity": severity,
+            "published_at": cve.get("published"),
+            "source": "NVD",
+            "url": f"https://nvd.nist.gov/vuln/detail/{cve_id}",
+        })
+
+    return results

patchradar-2026.8.1/src/patchradar/db/database.py

@@ -0,0 +1,92 @@
+import aiosqlite
+import asyncio
+from pathlib import Path
+
+DB_PATH = Path.home() / ".patchradar" / "patchradar.db"
+
+async def init_db():
+    DB_PATH.parent.mkdir(parents=True, exist_ok=True)
+    async with aiosqlite.connect(DB_PATH) as db:
+        await db.execute("""
+            CREATE TABLE IF NOT EXISTS watchlist (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                name TEXT UNIQUE NOT NULL,
+                added_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+            )
+        """)
+        await db.execute("""
+            CREATE TABLE IF NOT EXISTS cves (
+                id TEXT PRIMARY KEY,
+                software TEXT NOT NULL,
+                description TEXT,
+                cvss_score REAL,
+                cvss_version TEXT,
+                severity TEXT,
+                published_at TIMESTAMP,
+                source TEXT,
+                url TEXT,
+                seen_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
+            )
+        """)
+        await db.commit()
+
+async def add_to_watchlist(name: str) -> bool:
+    async with aiosqlite.connect(DB_PATH) as db:
+        try:
+            await db.execute(
+                "INSERT INTO watchlist (name) VALUES (?)", (name.lower(),)
+            )
+            await db.commit()
+            return True
+        except aiosqlite.IntegrityError:
+            return False
+
+async def get_watchlist() -> list[str]:
+    async with aiosqlite.connect(DB_PATH) as db:
+        async with db.execute("SELECT name FROM watchlist ORDER BY name") as cursor:
+            rows = await cursor.fetchall()
+            return [row[0] for row in rows]
+
+async def remove_from_watchlist(name: str) -> bool:
+    async with aiosqlite.connect(DB_PATH) as db:
+        cursor = await db.execute(
+            "DELETE FROM watchlist WHERE name = ?", (name.lower(),)
+        )
+        await db.commit()
+        return cursor.rowcount > 0
+
+async def save_cve(cve: dict) -> bool:
+    async with aiosqlite.connect(DB_PATH) as db:
+        try:
+            await db.execute("""
+                INSERT OR IGNORE INTO cves 
+                (id, software, description, cvss_score, cvss_version, 
+                 severity, published_at, source, url)
+                VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+            """, (
+                cve["id"], cve["software"], cve["description"],
+                cve.get("cvss_score"), cve.get("cvss_version"),
+                cve.get("severity"), cve.get("published_at"),
+                cve.get("source"), cve.get("url")
+            ))
+            await db.commit()
+            return cursor.rowcount > 0
+        except Exception:
+            return False
+
+async def get_cves(software: str = None, limit: int = 50) -> list[dict]:
+    async with aiosqlite.connect(DB_PATH) as db:
+        db.row_factory = aiosqlite.Row
+        if software:
+            async with db.execute(
+                "SELECT * FROM cves WHERE software = ? ORDER BY published_at DESC LIMIT ?",
+                (software.lower(), limit)
+            ) as cursor:
+                rows = await cursor.fetchall()
+        else:
+            async with db.execute(
+                "SELECT * FROM cves ORDER BY published_at DESC LIMIT ?",
+                (limit,)
+            ) as cursor:
+                rows = await cursor.fetchall()
+        return [dict(row) for row in rows]