Today I saw the API of EOL was upgraded and full information can be extracted from the API.
I think it is possible now to add this information to grype.
here is the relevant issue - Add capability to detect EOL packages and distros · Issue #2083 · anchore/grype · GitHub
1 Like