Feature Request: Per-Package Remediation and Time-To-Resolution Tracking

First of all, PatchMon is a pretty neat project and has a lot of potential but is lacking one key feature for us (otherwise we would have already deployed it across our fleet.)

PatchMon is already moving into enterprise compliance territory with OpenSCAP, OIDC SSO, alerting, and reporting. Time-to-remediation tracking is the natural complement — once teams can see what needs patching, the immediate next question from auditors and management is how long does it take to act on it?

What we'd need here is roughly:

• Per-package state-change history: a record of when each host/package transitioned to needs_update = true and when it was resolved, with security classification preserved, along with host needing a reboot, etc.
• Expose per-host remediation history (open and resolved, with date range and security filters) via API/reporting
• Control over the retention policy for resolved records
• Dashboarding of the time-to-resolution stats as a KPI/or SLA.
• Potentially exporting Prometheus style metrics for easy inclusion in existing Grafana (and other) systems.