[adulau]

The statistics page now shows record coverage and readable charts alongside the existing catalog totals. Coverage counts distinct CPEs/products, so several PURL mappings or vulnerability references on one CPE contribute only once.

• Add active/deprecated CPE counts, products without CPEs, vulnerability-reference coverage, CPEs per product, and a snapshot timestamp to the page and JSON API.
• Replace plain lists with responsive bar charts, formatted totals, contribution breakdowns, and vendor comparison bars. Support light/dark themes, empty datasets, and use without JavaScript.
• Preserve Valkey caching and its configurable TTL for the shared page/API snapshot and paginated rankings. Version the expanded payload cache key; keep database fallback when Valkey is unavailable. Document cache settings and additive API fields.

Validation: pytest -q --disable-warnings — 120 passed, 1 optional browser module skipped. Separate Chromium checks passed for desktop, tablet, 360px/320px mobile, light/dark themes, JavaScript enabled/disabled, chart bounds, and disclosure controls. Cache regressions verify zero SQL queries on warm page/API requests, refresh after cache misses, legacy-key isolation, TTL preservation, and Valkey failure fallback. OpenAPI YAML parses and git diff --check passes.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	🔄 Running since 2026-10-27T19:51:41.811132Z	cc932b5	PR opened
🔒 Security Review	✅ Completed 2026-10-27T19:53:54.609378Z	cc932b5	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.