Sheldon Warkentin

NIST NVD for CPE identifier support for BOM

2

I ran into an issue with the pypi dependency, `webargs==5.5.2` which has a CVE in [NIST NVD](https://nvd.nist.gov/vuln/detail/CVE-2020-7965#range-4441646) but was not discovered in OWASP dependency track. [OSS Sonatype Index does not...

## What did you implement: Changed `CheckSuite` property, `id` from `u32` to `u64` in order to properly deserialize Github API responses which have ids that are now larger than `u32`....

Enhancement: Use OID Public Key from Keycloak Realm URL

7

Thank you for taking the time to write this library! What are your thoughts on making the OID Public Key optional for JWT signature verification-- pulling from the keycloak API...