1. Proposed title of this feature request
   2. What is the nature and description of the request?
   3. Why does the customer need this? (List the business requirements here)
   4. List any affected packages or components.

1. Active Component attribute as a policy criteria

2. The current indicator of "active" components is limited to a UI column in a fairly hard-to-find UI page. Customers want to use component activity to guide their vulnerability and risk management efforts. This attribute should be available as a criteria in policy.

Like other criteria in the policy engine, this should be available at appropriate lifecycle and combinable with other criteria in boolean logic. Policies that use this criteria should support notifications, enforcement, etc.

3. Customer is looking to reduce noise and further prioritize vulnerability management efforts.