ecosyste-ms-cli 1.3.2__py3-none-any.whl

ecosyste_ms_cli-1.3.2.dist-info/METADATA

@@ -0,0 +1,133 @@
+Metadata-Version: 2.4
+Name: ecosyste_ms_cli
+Version: 1.3.2
+Summary: CLI for ecosyste.ms API
+Author-email: Sebastian Schürmann <sebs@2xs.org>
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/ecosyste-ms/ecosyste_ms_cli
+Project-URL: Repository, https://github.com/ecosyste-ms/ecosyste_ms_cli
+Keywords: ecosystems,package-manager,dependencies,security,cli
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development
+Classifier: Topic :: Utilities
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: click~=8.3.1
+Requires-Dist: requests~=2.32.5
+Requires-Dist: pyyaml~=6.0.3
+Requires-Dist: rich~=14.3.3
+Requires-Dist: mcp~=1.26.0
+Requires-Dist: openapi-core~=0.23.0
+Requires-Dist: packageurl-python~=0.17.6
+Requires-Dist: importlib-resources; python_version < "3.9"
+Provides-Extra: dev
+Requires-Dist: pytest~=9.0.2; extra == "dev"
+Requires-Dist: pytest-asyncio~=1.3.0; extra == "dev"
+Requires-Dist: black~=26.3.1; extra == "dev"
+Requires-Dist: isort~=8.0.1; extra == "dev"
+Requires-Dist: flake8~=7.3.0; extra == "dev"
+Requires-Dist: bandit~=1.9.4; extra == "dev"
+Requires-Dist: complexipy~=5.2.0; extra == "dev"
+Requires-Dist: tomli~=2.3.0; python_version < "3.11" and extra == "dev"
+Dynamic: license-file
+
+# Ecosystems CLI
+
+> The cli is still in a development phase. Some aspects of documentation or dev-x are lacking and some aspects of this software might have bugs.
+
+[![build-test-lint](https://github.com/ecosyste-ms/ecosyste_ms_cli/actions/workflows/build-test-lint.yml/badge.svg)](https://github.com/ecosyste-ms/ecosyste_ms_cli/actions/workflows/build-test-lint.yml)
+[![Latest Release](https://img.shields.io/github/v/release/ecosyste-ms/ecosyste_ms_cli)](https://github.com/ecosyste-ms/ecosyste_ms_cli/releases/latest)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+
+A command-line interface for interacting with ecosyste.ms APIs.
+
+## Installation
+
+Requirements:
+- Python >= 3.9
+
+```bash
+# Clone the repository
+git clone git@github.com:ecosyste-ms/ecosyste_ms_cli.git
+cd ecosyste_ms_cli
+
+# Set up virtual environment and install dependencies
+make setup
+```
+
+## Usage
+
+Each command includes helpful examples in its help text. Use `--help` with any command to see usage examples.
+
+```bash
+# Show available commands
+ecosystems --help
+```
+
+### Global Options
+
+- `--timeout`: Set the timeout in seconds for all HTTP requests (default: 20 seconds)
+- `--format`: Set the output format (default: table). Available formats: table, json, tsv, jsonl
+
+
+## Output Formats
+
+The CLI supports multiple output formats:
+
+```bash
+# Example: Set a 30-second timeout for all requests
+ecosystems --timeout 30 repos topics
+
+# Example: Get output in JSON format
+ecosystems --format json repos topics
+
+# Example: Get output in TSV format (tab-separated values)
+ecosystems --format tsv repos topics
+
+# Example: Get output in JSONL format (JSON Lines)
+ecosystems --format jsonl repos topics
+```
+
+## Available Commands
+
+The CLI provides access to various [ecosyste.ms APIs](https://ecosyste.ms/api). Each command group corresponds to an API endpoint:
+
+- **`advisories`** - Security advisories and vulnerability data
+- **`archives`** - Package archive analysis
+- **`commits`** - Repository commit data
+- **`dependabot`** - Dependabot integration data
+- **`diff`** - File and archive comparison
+- **`docker`** - Docker image metadata
+- **`issues`** - Repository issues and pull requests
+- **`licenses`** - License detection and analysis
+- **`opencollective`** - Open Collective funding data
+- **`packages`** - Package registry information
+- **`parser`** - Dependency file parsing
+- **`repos`** - Repository data and metadata
+- **`resolve`** - Dependency resolution
+- **`sbom`** - Software Bill of Materials generation
+- **`sponsors`** - GitHub Sponsors data
+- **`summary`** - Aggregated summaries
+- **`timeline`** - Event timeline data
+
+Use `--help` with any command for detailed usage and examples.
+
+## Examples
+
+* ecosystems packages package npmjs.org react --format json | jq '.name'
+
+
+## Documentation
+
+- [Development Guide](docs/DEVELOPMENT.md) - Information about development, testing, and release processes
+- [MCP Server](docs/MCP.md) - **[Experimental]** Model Context Protocol server for AI assistants
+- [License](LICENSE) - MIT License details

ecosyste_ms_cli-1.3.2.dist-info/RECORD

@@ -0,0 +1,84 @@
+ecosyste_ms_cli-1.3.2.dist-info/licenses/LICENSE,sha256=5ogoagwqYLkuCEV6iBk861YCHBivAbh4WoMAmKHBLxY,1077
+ecosystems_cli/__init__.py,sha256=YjBd_BJaPxsJIESF2XVzF_9piAQy8Knnks1cT9t-78E,88
+ecosystems_cli/__main__.py,sha256=Py4GUO6KRiXQ6dZ1QHGR7yAlvsy99fTMnFPwtnMb38E,91
+ecosystems_cli/cli.py,sha256=eYqKtKuJbNS_UeJnl575Sm1R4jJCsthGyca4Fzpbsqc,7384
+ecosystems_cli/constants.py,sha256=vj1FgYL7TEBq3eB76O14inBzB7uWK_P3Z1ERpTjPmIA,3288
+ecosystems_cli/exceptions.py,sha256=uvcH8BxtGJ8MfHF2Y5GHNjkPC1tyLdO_ah-S96sGXss,4228
+ecosystems_cli/mcp_server.py,sha256=Yi74Iptx03ksXnk9Ma6QEXRuXs9U61zKajwnrr8NT_A,10801
+ecosystems_cli/openapi_client.py,sha256=0bH4TAsvAuDITto4W2MQwlbRVeFuy3hF6Cteg5fKyAQ,16318
+ecosystems_cli/apis/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+ecosystems_cli/apis/advisories.openapi.yaml,sha256=7RUX7hvFS6-cwWMKOVME_AHqwpxjJLFyDaAUEVUrJwA,8841
+ecosystems_cli/apis/archives.openapi.yaml,sha256=e0KZLaAmS_OiDsRJtWGxl5uw6ulF5eNh2j5WjdxIxLc,5448
+ecosystems_cli/apis/commits.openapi.yaml,sha256=0LyYVT5I7zQaxojXgNmzfWpKBeDlN4VfsDJks9CUzeA,9601
+ecosystems_cli/apis/dependabot.openapi.yaml,sha256=MFLshbnRHUCWNFpaLlyKqA5AgpEKbL77DRnYwK1M134,23049
+ecosystems_cli/apis/diff.openapi.yaml,sha256=BC5teVOh4LeUJp9v2jOLYmBZQtWBJcBeoLTTj9Wr0QQ,2081
+ecosystems_cli/apis/docker.openapi.yaml,sha256=8QBjDEmcYy8O6iNOibdn02eDsSPo59SN-5rytUJ2pPA,13054
+ecosystems_cli/apis/issues.openapi.yaml,sha256=H378feXRtZlFCS8agiP1I9qME_IINvJAjmeijZH-vMk,21413
+ecosystems_cli/apis/licenses.openapi.yaml,sha256=Mte2GZdNGI4yf6hVqrqsFWzUh8eDteyTnpLkgQC2WlI,1841
+ecosystems_cli/apis/opencollective.openapi.yaml,sha256=RwEj_mHQnoePTSR9cL6fmNv-C6kL3p2omJYGMC2zmfw,5771
+ecosystems_cli/apis/packages.openapi.yaml,sha256=iFt3kbwpT3fkvq4bC2NX8NS_t4qDtCNLAFWdiLi2k_g,63765
+ecosystems_cli/apis/parser.openapi.yaml,sha256=PvVPkzySMI-NTb7bG0VQdqZKrkHmfr-M1iQqHp1crLQ,2285
+ecosystems_cli/apis/registries.yaml,sha256=cayUQ8-iMkQ1QNp2wRnHUJV6l2L3vQHvIGhJT_meTQo,3784
+ecosystems_cli/apis/repos.openapi.yaml,sha256=GlN4Kt96hIrSjMqgX2i89QZ6fUm3gGXQ98DqF8fzV8E,37956
+ecosystems_cli/apis/resolve.openapi.yaml,sha256=vKKiM6SuS0tOkHNKeByunp3L7gqwT99AuAEaeBMQUgY,3104
+ecosystems_cli/apis/sbom.openapi.yaml,sha256=dtgtFnLPS-HWM4izkUPuopS1VwnvvQ8woW29VbKHbmM,1800
+ecosystems_cli/apis/sponsors.openapi.yaml,sha256=Kup0a9aQRwZRzTmD_8oLSTJPFfuC71mTMyRpu4J6_tU,7931
+ecosystems_cli/apis/summary.openapi.yaml,sha256=ppQf0LDAdpPgHUWvGMrBH9dvZeuX61Cu26aaCg0l4Fg,5512
+ecosystems_cli/apis/timeline.openapi.yaml,sha256=YuDJXMRhFpFX7Tm4F0dm_Z9xcw2ZmyrR6RSO9uJMuac,2182
+ecosystems_cli/commands/__init__.py,sha256=7PP7iUSTDMTjBjS6CgJ7eICAjKJIx8CPATAqfztDitM,43
+ecosystems_cli/commands/advisories.py,sha256=SVDscI7LSNcOxpcK53bLO7O7UBaK1vKEVr56l6YIlAw,4306
+ecosystems_cli/commands/archives.py,sha256=hfbKoeuKbQCT3tWfL3onogHl7pUbs2bc1Vhw1lhs4Cg,165
+ecosystems_cli/commands/commits.py,sha256=p0oLkJNdezjWnuHKNvFnu0PqOIQUSFMyRg55hfwW4hk,162
+ecosystems_cli/commands/decorators.py,sha256=xhya_ZyuNEDBFBPNryB01cc5FyuNcZMqiQ-Sc4DAhtI,3129
+ecosystems_cli/commands/dependabot.py,sha256=_NtGB13tzMcG-PffyqbMHQUcwDHVYHajSowwcspYdoA,171
+ecosystems_cli/commands/diff.py,sha256=zXhaXg27GISTjmBAdqipB987W3-7Bb43F95MXlugNCI,5414
+ecosystems_cli/commands/docker.py,sha256=Lj5-hhPAsWwgGKVa_BD02vT321guaSy2gcqyf-PFJNo,159
+ecosystems_cli/commands/execution.py,sha256=tgnajXaEuph-bHnCjo1tv9zZ-Z_QNrJghn1F-ztDwyI,3748
+ecosystems_cli/commands/generator.py,sha256=N0F7E73ijGNl2uKzsdEKV34V-5bHmOnunenJshlsvoA,5149
+ecosystems_cli/commands/issues.py,sha256=d1r5zObqPtzjTVJoZjXPwbciAtm7L7sxDxQK-ET-nII,159
+ecosystems_cli/commands/licenses.py,sha256=F0Flxk5rb7ZUa7kmIipeCdpNN6YeqGPbtvD1C8H2HHE,5278
+ecosystems_cli/commands/mcp.py,sha256=UAQdEzvHO5db_LnzEt81CHuzQU3sIJ_tiagnxGsDDh0,1852
+ecosystems_cli/commands/opencollective.py,sha256=2bip6C9Ocvu__q15cI28d7uTKS8IhV8Ns6qmnOH6iz8,183
+ecosystems_cli/commands/packages.py,sha256=_q3YSltCu4ao2Bsc_8Bh2N7Pv0PCPbsy4kzUz1Vl8sE,5823
+ecosystems_cli/commands/parser.py,sha256=oP2nrZBpK1_PFhEbFRo0svB0oydXmm0kvg3kCCJHmvk,5252
+ecosystems_cli/commands/repos.py,sha256=1l6kazji7FPv8fIkkxh1RH0EHa-ETgzesTWtmgEOK1c,156
+ecosystems_cli/commands/resolve.py,sha256=F_qRkL638R5jiBi7mK0JiRtnug-UXxfcfkTNyBLEfao,5956
+ecosystems_cli/commands/sbom.py,sha256=FzuqXpCYEfCIrm4wDWt6SClLPV71fVPca8ZPp5GV16Q,5226
+ecosystems_cli/commands/sponsors.py,sha256=qCg22hxQN1dhBquEFNgUUtSn-bwLeHqcZ-aVu55QxIE,165
+ecosystems_cli/commands/summary.py,sha256=m3RnBt9k62C-63sfw7SsKtyh1icsY2DxZbQeahZ7XNM,162
+ecosystems_cli/commands/timeline.py,sha256=iKxKs7qdvG4DYyvMJJJDL7j2HufXV6sowl4Mc6yMsOI,165
+ecosystems_cli/commands/handlers/__init__.py,sha256=z2sAlxp-luU3F2OtU_N6t9GnpHJB6z0FowkvopzSqBo,1590
+ecosystems_cli/commands/handlers/advisories.py,sha256=ObDSRHD_JsbfqrwHmQQI-R-9goCKWZl0_As7Fwbjv9g,2862
+ecosystems_cli/commands/handlers/archives.py,sha256=UpaQlJ2mhY666eGTO5ys_l6IFP6GfFRans_7p36Nbws,1363
+ecosystems_cli/commands/handlers/base.py,sha256=ej26pvmlQMlz2GT_f8JqHjxm18-IVg2y5GI9RsETPw0,1206
+ecosystems_cli/commands/handlers/commits.py,sha256=45VAll0YXpjDMTNLrV9HICfLuM1np-IWIPcoRWLsk6s,2779
+ecosystems_cli/commands/handlers/default.py,sha256=xpGOtNsS8DqcH6oRhIOWBJXZkzwBu1a23NvSiiApGlY,1443
+ecosystems_cli/commands/handlers/dependabot.py,sha256=X6VfSC1b9u-2HUXuG2hgel-WVftQjVokBENPeLu3vvI,8065
+ecosystems_cli/commands/handlers/diff.py,sha256=FsF0QaSDm6tEHebq6wEf69Aka8hywQHbUICZ_X00fWE,2373
+ecosystems_cli/commands/handlers/docker.py,sha256=7axx4u-F-y00L-WLxwqUe73qFrcmZJqxKbzRPdRCLJw,5710
+ecosystems_cli/commands/handlers/factory.py,sha256=g8vxkEOomG_y2cSw_rMYWxh_yrQGdZuOZ1RZJcjl_Hg,2215
+ecosystems_cli/commands/handlers/issues.py,sha256=5SilFCq7PtvQ8iK6857kjesmANZHAcGkjpMuVxGEw-Q,3399
+ecosystems_cli/commands/handlers/licenses.py,sha256=V_EcOvgIEgRDD-YSf4XKTn_oJ_cCe7IMHHPyVPdMc_k,1667
+ecosystems_cli/commands/handlers/opencollective.py,sha256=s3s-q0Gu9taxiXg_al3N-9IxE3MaRRJOTlPe5Q5A-qw,3188
+ecosystems_cli/commands/handlers/packages.py,sha256=fWFMZUotnUgcR0kt_bUjvG9JpGVbaGS3zroP9US_14o,4676
+ecosystems_cli/commands/handlers/parser.py,sha256=SILjJVLIEEL68If3LuTviEi5O1tOBFmafg_-EsmB0aI,1885
+ecosystems_cli/commands/handlers/repos.py,sha256=8b549T0vi4jkPP7nuqEoj3_X2dSv8i4CSDsisT09fYk,4327
+ecosystems_cli/commands/handlers/resolve.py,sha256=-2Y7diDgYTapLidR6SyqL4j-vNJXB3PawrO7x9G_bps,2281
+ecosystems_cli/commands/handlers/sbom.py,sha256=oQaWqcYMrCr4EOrEd1cbiQ012yBpMRy2hkDW0vWN7aM,1651
+ecosystems_cli/commands/handlers/sponsors.py,sha256=LcRAltHxRmcxwyE1Ow0MBh0uwfz--qtjsQvjuyESa2M,1720
+ecosystems_cli/commands/handlers/summary.py,sha256=Z0Q927qIUKZ50QygOHZAYKgOnZWVTCeDaRTpcPb3-0U,2949
+ecosystems_cli/commands/handlers/timeline.py,sha256=I3D4k7iHrmzjLbGqYuNHnd_UKnpAZYhE6pEFnHdB108,1668
+ecosystems_cli/helpers/click_params.py,sha256=GtWz6ynZnMKPDjzi-vto4d3nn-Nm-mDRwl0ZVdEy7Kg,1565
+ecosystems_cli/helpers/flatten_dict.py,sha256=bXCTm8_IqRJ66dBp-URJQB8cnrOmEuac3KSLF0zpJyg,565
+ecosystems_cli/helpers/format_value.py,sha256=ZLluYL_c4xYiwPTzElQ1xr7mQmpgRjkVUkDiWtNsecE,1053
+ecosystems_cli/helpers/get_domain.py,sha256=0LFmqBkHuciQh4lds4yprjyhOjmi0WY5PZjG2X70hxQ,2120
+ecosystems_cli/helpers/load_api_spec.py,sha256=3wzdEiFuWsfGai10uEqb31rCAZP-Gv3qozT7U3UV5nM,1178
+ecosystems_cli/helpers/print_error.py,sha256=-wtrH1iUGq0cmLh1bqfNZroEA3hjr7L96KoWtVhRrJ4,476
+ecosystems_cli/helpers/print_operations.py,sha256=MFgM1KFMz2Jr-IMD5mo5AKEpBpK9F--iEfCOlcv93Y0,2561
+ecosystems_cli/helpers/print_output.py,sha256=FNSw8XSZ3WZj_cLxsmmPBCVPZ0z-dFkhquCoKGyVipw,6675
+ecosystems_cli/helpers/purl_parser.py,sha256=1P9KPWvXbryJTwZR8LH5KARSTdTZaXAZER1zaRDhaP0,4244
+ecosyste_ms_cli-1.3.2.dist-info/METADATA,sha256=AKTjv5opcF2j8R1WgbPDfX_eqHbz4clghlEIWfj40ws,4756
+ecosyste_ms_cli-1.3.2.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
+ecosyste_ms_cli-1.3.2.dist-info/entry_points.txt,sha256=DaalemcSflsffpe-ZAUGhP7t7y4t6V1b7qh_tmFDTkw,55
+ecosyste_ms_cli-1.3.2.dist-info/top_level.txt,sha256=hDyXgOtTvKXSFnU8CSpQRBlOudo3Kb2siOKU_lNL_zY,15
+ecosyste_ms_cli-1.3.2.dist-info/RECORD,,

ecosyste_ms_cli-1.3.2.dist-info/WHEEL

@@ -0,0 +1,5 @@
+Wheel-Version: 1.0
+Generator: setuptools (82.0.1)
+Root-Is-Purelib: true
+Tag: py3-none-any
+

ecosyste_ms_cli-1.3.2.dist-info/entry_points.txt

@@ -0,0 +1,2 @@
+[console_scripts]
+ecosystems = ecosystems_cli.cli:main

ecosyste_ms_cli-1.3.2.dist-info/licenses/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Sebastian Schürmann
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

ecosyste_ms_cli-1.3.2.dist-info/top_level.txt

@@ -0,0 +1 @@
+ecosystems_cli

ecosystems_cli/__init__.py

@@ -0,0 +1,3 @@
+"""Ecosystems CLI tool for interacting with ecosyste.ms APIs."""
+
+__version__ = "1.3.2"

ecosystems_cli/__main__.py

@@ -0,0 +1,4 @@
+from ecosystems_cli.cli import main
+
+if __name__ == "__main__":
+    main()  # type: ignore

ecosystems_cli/apis/advisories.openapi.yaml

@@ -0,0 +1,347 @@
+---
+openapi: 3.0.1
+info:
+  title: 'Ecosyste.ms: Advisories'
+  description: An open API service providing security vulnerability metadata for many
+    open source software ecosystems.
+  contact:
+    name: Ecosyste.ms
+    email: support@ecosyste.ms
+    url: https://ecosyste.ms
+  version: 1.0.0
+  license:
+    name: CC-BY-SA-4.0
+    url: https://creativecommons.org/licenses/by-sa/4.0/
+externalDocs:
+  description: GitHub Repository
+  url: https://github.com/ecosyste-ms/advisories
+servers:
+- url: https://advisories.ecosyste.ms/api/v1
+paths:
+  "/advisories":
+    get:
+      summary: list advisories
+      operationId: getAdvisories
+      tags:
+      - advisories
+      parameters:
+      - name: ecosystem
+        in: query
+        description: Ecosystem to filter by
+        required: false
+        schema:
+          type: string
+      - name: package_name
+        in: query
+        description: Package to filter by
+        required: false
+        schema:
+          type: string
+      - name: severity
+        in: query
+        description: Severity to filter by
+        required: false
+        schema:
+          type: string
+      - name: repository_url
+        in: query
+        description: Repository URL to filter by
+        required: false
+        schema:
+          type: string
+      - name: source
+        in: query
+        description: Source to filter by (e.g. github, erlef)
+        required: false
+        schema:
+          type: string
+      - name: page
+        in: query
+        description: pagination page number
+        required: false
+        schema:
+          type: integer
+      - name: per_page
+        in: query
+        description: Number of records to return
+        required: false
+        schema:
+          type: integer
+      - name: created_after
+        in: query
+        description: filter by created_at after given time
+        required: false
+        schema:
+          type: string
+          format: date-time
+      - name: updated_after
+        in: query
+        description: filter by updated_at after given time
+        required: false
+        schema:
+          type: string
+          format: date-time
+      - name: sort
+        in: query
+        description: field to order results by
+        required: false
+        schema:
+          type: string
+      - name: order
+        in: query
+        description: direction to order results by
+        required: false
+        schema:
+          type: string
+      responses:
+        200:
+          description: OK
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  "$ref": "#/components/schemas/Advisory"
+  "/advisories/packages":
+    get:
+      summary: list packages that have advisories
+      operationId: getAdvisoriesPackages
+      tags:
+      - advisories
+      responses:
+        200:
+          description: OK
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  "$ref": "#/components/schemas/Package"
+  "/advisories/lookup":
+    get:
+      summary: lookup advisories by Package URL (PURL)
+      operationId: lookupAdvisoriesByPurl
+      description: Lookup security advisories for a package using Package URL (PURL)
+        specification. Supports multiple ecosystems including npm, pypi, rubygems,
+        maven, nuget, go, and cargo.
+      tags:
+      - advisories
+      parameters:
+      - name: purl
+        in: query
+        description: 'Package URL (PURL) to lookup advisories for. Format: pkg:type/namespace/name@version'
+        required: true
+        schema:
+          type: string
+        example: pkg:npm/lodash@4.17.20
+      responses:
+        200:
+          description: List of advisories for the specified package
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  "$ref": "#/components/schemas/Advisory"
+        400:
+          description: Bad Request - Invalid or missing PURL parameter
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  error:
+                    type: string
+                    example: PURL parameter is required
+  "/advisories/{advisoryUUID}":
+    get:
+      summary: get a advisories by uuid
+      operationId: getAdvisory
+      tags:
+      - advisories
+      parameters:
+      - in: path
+        name: advisoryUUID
+        schema:
+          type: string
+        required: true
+        description: uuid of the advisory
+      responses:
+        200:
+          description: OK
+          content:
+            application/json:
+              schema:
+                "$ref": "#/components/schemas/Advisory"
+  "/sources":
+    get:
+      summary: list advisory sources
+      operationId: getSources
+      tags:
+      - sources
+      responses:
+        200:
+          description: OK
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  "$ref": "#/components/schemas/Source"
+  "/sources/{sourceKind}":
+    get:
+      summary: get a source by kind
+      operationId: getSource
+      tags:
+      - sources
+      parameters:
+      - in: path
+        name: sourceKind
+        schema:
+          type: string
+        required: true
+        description: kind of the source (e.g. github, erlef)
+      responses:
+        200:
+          description: OK
+          content:
+            application/json:
+              schema:
+                "$ref": "#/components/schemas/Source"
+components:
+  schemas:
+    Advisory:
+      type: object
+      properties:
+        uuid:
+          type: string
+        url:
+          type: string
+        title:
+          type: string
+        description:
+          type: string
+        origin:
+          type: string
+        severity:
+          type: string
+        published_at:
+          type: string
+        withdrawn_at:
+          type: string
+        classification:
+          type: string
+        cvss_score:
+          type: number
+        cvss_vector:
+          type: string
+        references:
+          type: array
+          items:
+            type: string
+        source_kind:
+          type: string
+        identifiers:
+          type: array
+          items:
+            type: string
+        repository_url:
+          type: string
+        blast_radius:
+          type: number
+        packages:
+          type: array
+          items:
+            "$ref": "#/components/schemas/PackageWithDetails"
+        created_at:
+          type: string
+        updated_at:
+          type: string
+        epss_percentage:
+          type: number
+        epss_percentile:
+          type: number
+        api_url:
+          type: string
+          description: API URL for this advisory
+        html_url:
+          type: string
+          description: HTML URL for this advisory
+        related_advisories:
+          type: array
+          description: Advisories from other sources for the same vulnerability (matched
+            by CVE)
+          items:
+            "$ref": "#/components/schemas/RelatedAdvisory"
+    RelatedAdvisory:
+      type: object
+      properties:
+        uuid:
+          type: string
+        source_kind:
+          type: string
+        url:
+          type: string
+    Source:
+      type: object
+      properties:
+        id:
+          type: integer
+        name:
+          type: string
+        kind:
+          type: string
+        url:
+          type: string
+        advisories_count:
+          type: integer
+        created_at:
+          type: string
+        updated_at:
+          type: string
+    Package:
+      type: object
+      properties:
+        ecosystem:
+          type: string
+        package_name:
+          type: string
+    PackageWithDetails:
+      type: object
+      properties:
+        ecosystem:
+          type: string
+        package_name:
+          type: string
+        purl:
+          type: string
+          description: Package URL (PURL) for this package
+          example: pkg:npm/lodash
+        versions:
+          type: array
+          items:
+            type: object
+            properties:
+              vulnerable_version_range:
+                type: string
+              first_patched_version:
+                type: string
+        statistics:
+          type: object
+          properties:
+            dependent_packages_count:
+              type: integer
+            dependent_repos_count:
+              type: integer
+            downloads:
+              type: integer
+            downloads_period:
+              type: string
+        affected_versions:
+          type: array
+          items:
+            type: string
+        unaffected_versions:
+          type: array
+          items:
+            type: string