Open Source Vulnerability

A schema for describing a vulnerability in an open source package.

Get JSON SchemaBundle
Use with
$ jsonschema install https://schemas.sourcemeta.com/ossf/osv/v1.2.0/schema schemas/schema.json
$ref: "https://schemas.sourcemeta.com/ossf/osv/v1.2.0/schema"
import schema from "https://schemas.sourcemeta.com/ossf/osv/v1.2.0/schema" with { type: "json" };
Identifierhttps://schemas.sourcemeta.com/ossf/osv/v1.2.0/schema
Base Dialect2020-12
Dialecthttps://json-schema.org/draft/2020-12/schema
Health
85%
Size0.005396 MB
Loading schema...

This schema declares 0 examples.

Loading...
Loading...

This schema has 11 quality errors.

top_level_examples

Set a non-empty examples array at the top level of the schema to illustrate the expected data

/descriptiondescription_trailing_period

Descriptions should not end with a period to give user interfaces flexibility in presenting the text

/properties/affected/items/allOf/0/ifunnecessary_allof_wrapper

Keywords inside allOf that do not conflict with the parent schema can be elevated

/properties/affected/items/allOf/0/thenthen_empty

Setting the then keyword to the empty schema does not add any further constraint

/properties/affected/items/allOf/0/thenempty_object_as_true

The empty schema {} accepts all values and is equivalent to the boolean schema true

/properties/affected/items/properties/ranges/items/allOf/0/ifunnecessary_allof_wrapper

Keywords inside allOf that do not conflict with the parent schema can be elevated

/properties/affected/items/properties/ranges/items/properties/events/contains/required/0required_properties_in_properties

Every property listed in the required keyword must be explicitly defined using the properties keyword

/properties/affected/items/properties/ranges/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/properties/references/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/properties/severity/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/properties/severity/items/properties/type/enumenum_to_const

An enum of a single value can be expressed as const