How do you keep track of packages on your machines?

I manage a pretty disparate cluster of servers. Lots of Ubuntu VMs using Proxmox, a k8s cluster for Jupyter notebooks, and some old bare metal one-offs (Solaris, etc). Though Debian based is probably by far the most common. Right now I’ve inherited a spreadsheet listing OS versions and physical locations of each of the machines, some info on more stable VMs that handle key services (dns, chat, mail, web services, etc). Finally there are some VMs that belong to researchers who could be doing anything I’m not alone in managing all this thank gourd, but I’m new here, so it is a chore every time a new CVE drops to go trawling around to check what software is installed where and what version it is. Any ideas on how to implement a sort of queryable database of all the packages and their versions? I’m imagining a service that polls the individual nodes and fetches the information in whatever way is necessary for that system, then plops that info into a document db and presents it as a web app that lets people (me) do simple CRUD operations as well as add whatever context is relevant (last_checked, notes, location, history, etc). PS. I definitely don’t want to roll out a prescriptive one-size-fits-all deployment model to make the job of querying easier. I’m fine taking on the complexity if I can let the people using my cluster continue being freaky little weirdos. :)