Possible GSoC Idea; Term wrapper

[harshverma27]

Hi Folks,
I am Harsh Verma, a sophomore engineering student from National Institute of Technology, Hamirpur. I work with Python, Assembly, and C all around my day.

I was going through the already present ideas of GSoC and this idea came to my mind, as few years ago I lost my laptop because of a bugged repository.

So this idea revolves around being a wrapper when installing packages, either from apt, yay, pip, npm etc.

It will include:

1. full dependency tree vulnerability scanning via Vulnerable Code.
2. License compliance checking
3. Caching layer (to make it fast)
4. Cli with clear warnings and --strict mode

And we can stretch this even further with:

1. Software BOM generation and checking
2. Config file (for enterprises)
3. GitHub action (same above but for a repository)

I've also studied about the technical part of this project, and this is pretty much a small-medium length project. I'm more than ready to hear any suggestions and further extensions.

Hoping to hear a positive reply, @tdruez @pombredanne @AyanSinhaMahapatra
Harsh V.