Identifying priorities for version 6.0.0

[alilleybrinker]

While the QWG has not fully solidified the versioning guarantees of the CVE Record Format (see #418), there are nonetheless clearly changes which could only be done in a 6.0.0 version of the Record Format.

This issue is intended to serve as a tracking place for priorities which are being considered for a future version 6.0.0.

---

This would also involve establishing goals, such as:

• Empower automation
• Increase rigor

---

The QWG has captured a key goal of building 6.0.0 from a product perspective, defining clear user personas, use cases, and the like, and driving the development of 6.0.0 based on what users need.

[alilleybrinker]

• Redesign the affected array to address limitations / problems.
  • Remove the cpes array.
  • Consider a new way to identify artifacts consistently (perhaps an adjacent affectedArtifacts array?)
  • Consider logical connectives inspired by the cpeApplicability block
  • Eliminate redundancy with the cpeApplicability block
  • Surely more...