The documentation states that the default cache dir on an XDG compatible *nix system is $XDG_CONFIG_HOME/composer/cache but composer uses XDG_CACHE_HOME/composer as default.

https://getcomposer.org/doc/03-cli.md#composer-cache-dir quote:

By default it points to $COMPOSER_HOME/cache on *nix and macOS, and C:\Users<user>\AppData\Local\Composer (or %LOCALAPPDATA%/Composer) on Windows.

The current version has several regex warnings.
The work consists in:

1. collecting the wheel and sdist craft the ABOUT files and creating a PR to add the latest NLTK in https://github.com/nexB/thirdparty-packages/tree/main/pypi
2. update the setup.cfg and requirements.txt
3. run the copyright tests, fix the code until all tests pass. Submit a PR early would be good.

Issue Description

When reviewing a SR in the web UI, reviewers can either "Approve" or "Disregard" the SR. However, the word "disregard" is imo misused in this context, given the definition for disregard: to pay no attention to; treat as unworthy of regard or notice. Actually though, the reviewer is paying enough attention to the SR to

Some packages may bundle dependencies. We could report outdatedness for these the following way: for outdated packages with single download, propagate outdated status onto the download URL. Then we could show this download specially for other packages, or even make it affect the status.