PURLToPackage converts a Package URL string to models.PackageInfo.

nolint:gosec.

nolint:gosec.

nolint:gosec.

Affected describes an affected package version, meaning one instance that contains the vulnerability.

Credit gives credit for the discovery, confirmation, patch, or other events in the life cycle of a vulnerability.

Event describes a single version that either: - Introduces a vulnerability: {"introduced": string} - Fixes a vulnerability: {"fixed": string} - Describes the last known affected version: {"last_affected": string} - Sets an upper limit on the range being described: {"limit": string} Event instances form part of a “timeline” of status changes for the affected package described by the Affected struct.

ExperimentalAnalysisConfig is an experimental type intended to contain the types of analysis performed on packages found by the scanner.

Package identifies the affected code library or command provided by the package.

Specific package information.

Vulnerabilities grouped by sources.

Vulnerabilities grouped by package TODO: rename this to be Package as it now includes license information too.

Range describes the affected range of given version for a specific package.

Reference links to additional information, advisories, issue tracker entries, and so on about the vulnerability itself.

Severity is used to describe the severity of a vulnerability for an affected package using one or more quantitative scoring methods.

Vulnerability is the core Open Source Vulnerability (OSV) data type.

Flattened Vulnerability Information.

Combined vulnerabilities found for the scanned packages.

License is an SPDX license.