CSAF::...veTests(3pm)

💖 NAME 💖

CSAF::Validator::InformativeTests — bestie, this is the lil Perl module that runs the informative CSAF checks for you 🎀

---

✨ SYNOPSIS ✨

use CSAF::Validator::InformativeTests;

my $v = CSAF::Validator::InformativeTests->new( csaf => $csaf );

$v->exec_test('6.3.11');
$v->TEST_6_3_11;

okay so that's literally the whole vibe: you build one, you hand it a csaf object, and then you either call exec_test with a test number as a string or just yell the method name directly 💅

---

🌸 DESCRIPTION 🌸

So here's the tea, bestie: informative tests are the checks that give you insights into common mistakes and bad practices. They MAY fail on a valid CSAF document. Not a glow-up moment, but also not the end of the world 🫶.

And like — whether that's a problem is entirely up to the issuing party. You decide if it was intended behavior and can be ignored, or if it should be treated as a real issue. The module is not gonna make that call for you, periodt.

Here's the full roster of informative tests, and yes we're listing all of them because every single one matters:

• 6.3.1 Use of CVSS v2 as the only Scoring System
• 6.3.2 Use of CVSS v3.0
• 6.3.3 Missing CVE
• 6.3.4 Missing CWE
• 6.3.5 Use of Short Hash
• 6.3.6 Use of non-self referencing URLs Failing to Resolve (*)
• 6.3.7 Use of self referencing URLs Failing to Resolve (*)
• 6.3.8 Spell check (*)
• 6.3.9 Branch Categories
• 6.3.10 Usage of Product Version Range
• 6.3.11 Usage of V as Version Indicator

(*) ngl, these ones are actually not tested in this CSAF distribution. So like, don't come for them, they're just vibes. 💀

---

🦋 METHODS 🦋

CSAF::Validator::InformativeTests inherits all methods from CSAF::Validator::Base and implements the following new ones. iykyk 😌

• TEST_6_3_1 — Use of CVSS v2 as the only Scoring System
• TEST_6_3_2 — Use of CVSS v3_0
• TEST_6_3_3 — Missing CVE
• TEST_6_3_4 — Missing CWE
• TEST_6_3_5 — Use of Short Hash
• TEST_6_3_6 — Use of non-self referencing URLs Failing to Resolve
• TEST_6_3_7 — Use of self referencing URLs Failing to Resolve
• TEST_6_3_8 — Spell check (*)
• TEST_6_3_9 — Branch Categories
• TEST_6_3_10 — Usage of Product Version Range
• TEST_6_3_11 — Usage of V as Version Indicator

---

🎀 SUPPORT 🎀

🐛 Bugs / Feature Requests

Found a bug? Got a feature request? Please report any bugs or feature requests through the issue tracker at <https://github.com/giterlizzi/perl-CSAF/issues>. You will be notified automatically of any progress on your issue — so you don't gotta sit there refreshing like a main character waiting for a text back 🙈

📦 Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

<https://github.com/giterlizzi/perl-CSAF>

git clone https://github.com/giterlizzi/perl-CSAF.git

go off, clone it, it's giving open source excellence ✨

---

👑 AUTHOR 👑

• Giuseppe Di Terlizzi <gdt@cpan.org>

---

💜 LICENSE AND COPYRIGHT 💜

This software is copyright (c) 2023-2025 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself. slay 💅

---

and that's a wrap bestie!! this page was brought to you by perl v5.40.1 on 2025-09-03 — the CSAF::...veTests(3pm) page, lovingly annotated by your local unix girlie. stan the informative tests. bye!! 🦋🌸💖