Suggestion

Follow-up story from strongloop/loopback-next#4992 (comment)

Now the fields filter only allow object, like {fields: {title: true, desc: true}}, but doesn't allow the array shortcut like {fields: ['title', 'desc']}.

We should support the array shortcut as well.

Copy the details here:

fields: ['foo', 'bar'] is not allowed with

updater.py on confined_target_dirs:

  # ... In the example, the client has chosen '', which is
  # interpreted as no confinement.  In other words, the client can download
  # targets from any directory or subdirectories.  If the client had chosen
  # 'targets1/', they would have been confined to the '/targets/targets1/'
  # directory on the 'http://localhost:8001' mirror.
  repository

Currently the DTD is not valid for the new item-submission.xml format. https://jira.lyrasis.org/browse/DS-4264

Some packages may bundle dependencies. We could report outdatedness for these the following way: for outdated packages with single download, propagate outdated status onto the download URL. Then we could show this download specially for other packages, or even make it affect the status.