One of the Github projects I started this year was a KEV and End‑of‑Life tracking tool, a small engine that pulled CISA KEV entries and vendor EOL timelines, and highlighted assets that were both vulnerable and unsupported.
It was a powerful idea.
KEV tells you what’s being exploited.
EOL tells you what can’t be patched.
Putting them together gives you a real‑world risk picture that most organisations never see.
The prototype worked, but maintaining the data sources, normalising formats, and keeping the engine updated quickly became more than I could justify week‑to‑week. With my IRP work, cyber publishing schedule, and travel writing cadence, the project simply didn’t fit.
So I made the call to pause development.
Just like the patch tool, I’ve left the KEV/EOL project up on GitHub. It’s not abandoned, it’s parked. When I have more time (or when I decide to build a full automation suite for this series), I’ll pick it back up.
For now, it’s a reminder of the direction I want to take with my writing, but if you want to use it or build on it, feel free to fork it, it’s still available on my GitHub.