packages

The documentation states that the default cache dir on an XDG compatible *nix system is $XDG_CONFIG_HOME/composer/cache but composer uses XDG_CACHE_HOME/composer as default.

https://getcomposer.org/doc/03-cli.md#composer-cache-dir quote:

By default it points to $COMPOSER_HOME/cache on *nix and macOS, and C:\Users<user>\AppData\Local\Composer (or %LOCALAPPDATA%/Composer) on Windows.

In http://rpmfind.net/linux/fedora/linux/development/rawhide/Everything/aarch64/os/Packages/g/GConf2-devel-3.2.6-31.fc36.aarch64.rpm we get this and the "unknown" is incorrect:

headers:
    -   tool_name: scancode-toolkit
        tool_version: 30.0.0
        options:
            input:
                - GConf2-devel-3.2.6-31.fc36.aarch64.rpm
            --license: yes
            --l

Github introduced a nice UI for syncing your fork with upstream.

We could use something like that for package links. osc has the setlinkrev command for this.

Some packages may bundle dependencies. We could report outdatedness for these the following way: for outdated packages with single download, propagate outdated status onto the download URL. Then we could show this download specially for other packages, or even make it affect the status.