{"adoption": {"forks": 354, "observed_at": "2026-08-28T04:07:28.887270+00:00", "stars": 2901}, "canonical_url": "https://ross.abutalabs.com/products/osvdev", "card": {"archived": false, "artifact_type": "service", "description": "Open source vulnerability DB and triage service.", "domain": ["security", "developer-tools", "databases", "apis"], "enriched": true, "function": ["vulnerability-scanning", "security", "database", "search-engine", "etl", "api-framework", "http-server", "sdk", "infrastructure-as-code"], "health_score": 98, "homepage": "https://osv.dev", "language": "Go", "license": "Apache-2.0", "license_family": "permissive", "maturity": "stable", "member_repos": ["google/osv.dev"], "name": "google/osv.dev", "platform": ["cloud", "go", "python", "serverless"], "pushed_at": "2026-08-26T19:26:55+00:00", "repo": "google/osv.dev", "stars": 2901, "tags": ["vulnerability-database", "osv-schema", "cve", "security-advisories", "sbom", "dependency-vulnerabilities", "triage", "gcp", "terraform", "data-dumps", "automation", "web-server", "docker"], "topics": ["security", "security-tools", "vulnerability-scanners", "vulnerability-management", "vulnerability", "vulnerability-databases"], "urls": [], "use_cases": ["check whether a specific package version is affected by known vulnerabilities", "query a vulnerability database by package name and version via API", "convert CVE and NVD feeds into a structured vulnerability format", "aggregate security advisories across many package ecosystems", "download structured vulnerability data dumps for security tooling", "look up vulnerabilities in an SBOM or lockfile", "run my own instance of a vulnerability database service"], "what_it_is": "OSV (Open Source Vulnerabilities) is Google's open, distributed vulnerability database and triage service that aggregates security advisories from dozens of ecosystems (npm, PyPI, Go, Maven, Debian, Alpine, Linux distros, etc.) into a precise structured schema, exposed via a public API, web UI, and GCS data dumps. This repository contains the full code powering the hosted osv.dev service, including the API server, web backend, ingestion workers, NVD/CVE feed converters, language bindings, and Terraform deployment configuration.", "when_to_avoid": ["You only want to scan your project's dependencies locally - use the separate google/osv-scanner CLI instead", "You need a full commercial vulnerability management platform with ticketing, policies, and dashboards", "You just need general application security testing rather than known-vulnerability data"], "when_to_choose": ["You need an open, precise, per-ecosystem vulnerability data source with a queryable API", "You want structured OSV-format data dumps to power your own security scanning or compliance tooling", "You are building dependency or SBOM analysis and need to resolve whether versions are affected", "You want to study or self-host the infrastructure of a vulnerability ingestion and triage pipeline"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/osvdev", "repo": "google/osv.dev", "role": "main", "score": 84}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.887270+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T07:35:09.648156+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "3b82b065d977f04e7ba66f80a5b3ca555ac3e5ea587961d74a677f0dec8b6e03", "fetched_at": "2026-08-28T04:07:28.887270+00:00", "kind": "readme", "missing": false, "url": "https://github.com/google/osv.dev"}, {"content_hash": "2051250237d1805816144e1490de14a3a84ab3b16544bab5af6a90b05e4fd1dd", "fetched_at": "2026-08-29T09:49:51.526303+00:00", "kind": "homepage", "missing": false, "url": "https://osv.dev"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 99, "longevity": 100, "rhythm": 56}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2064, "days_push": 7, "days_rel": 134, "gap_med": 107.0, "n_releases_24m": 5}, "score": 84, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}