Hi Daniel,
Thanks for letting me know.
I submitted a control command to start working on it.
So far, grype shares more than 90% of its dependencies with syft.
So my current plan:
1. Package syft first (~124 missing deps - this is the heavy work)
2. Then grype becomes straightforward (+18 additional deps)
I've prepared the initial gbp repository structure for grype and
will push to salsa.
This is a long-term effort, given the dependency tree, but a good opportunity to work with a team too.
Best regards,
Juan Manuel Méndez Rey