Discussion for issues to include in next 5.2.0 release

[jayjacobs]

These are in no particular order.

1. Split Schema Implementation to Input and Output Schemas #385
2. Remove all "supportingMedia" sections from the JSON #363
3. Modify schema to enforce UTC and timezones  #353
4. Require CNA organization type, at least when type == vendor #340 and is vendor == CNA? Capture a way to say a product is from a different origin/source/upstream #78
5. Move "x_generator" to an official and optional string value "generator" #327
6. Drop support for optional data values starting with "x_" #318 - Only in the "output" schema, and then filter the output data in github
7. Define the "source" section: containers.cna.source.defect has multiple data types #317 and The "source" element in adpContainer and cnaPublishedContainer seems to be incorrect or incomplete #339
8. Add a formal semver 2.0.0 version type #371
9. CERT/CC SSVC metrics for CVE using ADP #144

[darakian]

Still up for discussion, but given #371 should be considered for 5.2.0 as well

[jayjacobs]

Edit in original post: added #371 in to the list.

[alilleybrinker]

Related, there is an open Milestone for 5.2.0: https://github.com/CVEProject/cve-schema/milestone/6