Attempt to generate patched_versions from GHSA firstPatchedVersion.

[postmodern]

Attempt to automatically generate the patched_versions from the GHSA vulnerabilities/firstPatchedVersion/identiifer information.

[postmodern]

@jasnow since I don't have the GitHub sync OAuth token setup locally, could you test this branch and see if it can correctly generate patched_versions for new GHSA advisories?

[jasnow]

• Added comma at end of line 379: "patched_versions" => patched_versions_for(package).
• Working on this:

NoMethodError: undefined method `[]' for nil:NilClass

         first_patched_versions << v['firstPatchedVersion']['identifier']

[postmodern]

@jasnow interesting, looks like not all vulnerabilities have firstPatchedVersion key, which makes sense since some vulnerabilities will be unpatched.

[jasnow]

Noticed that you use double quotes were used inside "[]"s elsewhere in the script.

[jasnow]

I will start testing this PR today. Here are some of my test cases: https://gist.github.com/jasnow/7c99f4d9e8b838293ba407af373141af

Probably need a supported grammar for "unaffected_versions:" and "patched_versions:" and
what the expected outputs are for more complex test cases in my gist.

[jasnow]

Results of 1st gist testcase (after post-processing): https://gist.github.com/jasnow/000dd1ee3c8eedd6b78bb7b7dab51cdb

• Related: Lost unaffected_versions value

---

Extra

• Lost framework:, cvss_v2
• Added 2 blank lines at the end, related:/urls.
• Post-processing changes: https://gist.github.com/jasnow/77ae70f7f1f2c577a5dfd8fb4186d332

I will stop at the 1st gist testcase for now.