@renovatebot/osv-offline-db 1.2.0 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/dist/lib/osv.d.ts +36 -29
  2. package/package.json +1 -1
package/dist/lib/osv.d.ts CHANGED
@@ -1,62 +1,69 @@
1
1
  /**
2
2
  * A schema for describing a vulnerability in an open source package.
3
+ *
4
+ * https://github.com/ossf/osv-schema/blob/main/validation/schema.json
3
5
  */
4
6
  export interface Vulnerability {
5
- affected?: Affected[];
7
+ schema_version?: string;
8
+ id: string;
9
+ modified: string;
10
+ published?: string;
11
+ withdrawn?: string;
6
12
  aliases?: string[];
13
+ related?: string[];
14
+ summary?: string;
15
+ details?: string;
16
+ severity?: Severity[];
17
+ affected?: Affected[];
18
+ references?: Reference[];
7
19
  credits?: Credit[];
8
- databaseSpecific?: {
20
+ database_specific?: {
9
21
  [key: string]: unknown;
10
22
  };
11
- details?: string;
12
- id: string;
13
- modified: Date;
14
- published?: Date;
15
- references?: Reference[];
16
- related?: string[];
17
- schemaVersion?: string;
18
- severity?: Severity[];
19
- summary?: string;
20
- withdrawn?: Date;
21
23
  }
22
24
  export interface Affected {
23
- databaseSpecific?: {
25
+ package?: Package;
26
+ severity?: Severity[];
27
+ ranges?: Range[];
28
+ versions?: string[];
29
+ ecosystem_specific?: {
24
30
  [key: string]: unknown;
25
31
  };
26
- ecosystemSpecific?: {
32
+ database_specific?: {
27
33
  [key: string]: unknown;
28
34
  };
29
- package?: Package;
30
- ranges?: Range[];
31
- versions?: string[];
32
35
  }
36
+ export interface Severity {
37
+ type: SeverityType;
38
+ score: string;
39
+ }
40
+ export type SeverityType = 'CVSS_V3' | 'CVSS_V2';
33
41
  export interface Package {
34
42
  ecosystem: string;
35
43
  name: string;
36
44
  purl?: string;
37
45
  }
38
46
  export interface Range {
39
- events: Event[];
40
- repo?: string;
41
47
  type: RangeType;
48
+ repo?: string;
49
+ events: Event[];
50
+ database_specific?: {
51
+ [key: string]: unknown;
52
+ };
42
53
  }
54
+ export type RangeType = 'ECOSYSTEM' | 'GIT' | 'SEMVER';
43
55
  export interface Event {
44
56
  introduced?: string;
45
57
  fixed?: string;
58
+ last_affected?: string;
46
59
  limit?: string;
47
60
  }
48
- export type RangeType = 'ECOSYSTEM' | 'GIT' | 'SEMVER';
49
- export interface Credit {
50
- contact?: string[];
51
- name: string;
52
- }
53
61
  export interface Reference {
54
62
  type: ReferenceType;
55
63
  url: string;
56
64
  }
57
- export type ReferenceType = 'ADVISORY' | 'ARTICLE' | 'FIX' | 'GIT' | 'PACKAGE' | 'REPORT' | 'WEB';
58
- export interface Severity {
59
- score: string;
60
- type: SeverityType;
65
+ export interface Credit {
66
+ name: string;
67
+ contact?: string[];
61
68
  }
62
- export type SeverityType = 'CVSS_V3';
69
+ export type ReferenceType = 'ADVISORY' | 'ARTICLE' | 'REPORT' | 'FIX' | 'GIT' | 'PACKAGE' | 'EVIDENCE' | 'WEB';
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@renovatebot/osv-offline-db",
3
- "version": "1.2.0",
3
+ "version": "1.3.0",
4
4
  "main": "dist/index.js",
5
5
  "types": "dist/index.d.ts",
6
6
  "license": "MIT",