Please refer to CLAIRDEV-41 for more information.

—

Snapshot of CLAIRDEV-41 description:

Rpm does not record repository information. This information is recorded in dnf. Claircore's rpm indexer should consult the dnf database when possible. This should provide more information for to the repository heuristic to make more accurate associations.

One forseeable problem is the migration from dnf v3/v4 to dnf5. The database schema is the same, but with different magic constants. This would require more investigation to future-proof.

Dnf supplanted yum – support for yum's database can be added later, if needed.