Enquiry on when withdrawn is used. #234
Description
Hi, this is likely not an issue but just looking for clarification.
I have been reviewing the repository with the view of using it on a project but am looking for a clarification as to when withdrawn is used.
My understanding is that withdrawn is intended for when an advisory was found to be incorrect.
Looking through the advisories in aamiles, this has been marked as withdrawn, looking at the repository it would appear the package still has problems as can be seen in the setup.py file (https://github.com/bOrionis/AAmiles/blob/master/setup.py), it is still installing the request library (not to be confused with requests),
Although the request library is no longer available shouldn't this still be an active advisory? Or is it withdrawn in favour of the request library being flagged instead (although the request library isn't in the advisory, I guess it was too early for this database)?
If the request library issue predates this repository is there any mileage (or are they even there) in importing advisories for previous years?