search

NodeSecure / vulnera

Programmatically fetch security vulnerabilities with one or many strategies (NPM Audit, Sonatype, Snyk, Node.js DB).
MIT License
30 stars 14 forks source link

Implement OSV format #196

Open fraxken opened 1 year ago

fraxken commented 1 year ago

I think we should work toward the goal of supporting multiple formats including OSV: https://ossf.github.io/osv-schema/

For the API we should probably rename useStandardFormat to useFormat. This new property take a string with possible enumeration: OSV or Standard

const vulnerabilities = await definition.getVulnerabilities(process.cwd(), {
  useFormat: "OSV"
});
fabnguess commented 1 year ago

I take