ossf / malicious-packages

A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerability (OSV) format.
Apache License 2.0
210 stars 19 forks source link

Add support for multiple prefixes per source. #478

Closed calebbrown closed 2 months ago

calebbrown commented 2 months ago

This allows for more diverse types of sources, such as when multiple streams of OSV files may be present in a single bucket under different prefixes.

oliverchang commented 2 months ago

(whoops, accidentally merged, sorry if that wasn't OK!)