Open Source Vulnerability

A schema for describing a vulnerability in an open source package. See also https://ossf.github.io/osv-schema/

Get JSON SchemaBundle
Use with
$ jsonschema install https://schemas.sourcemeta.com/ossf/osv/v1.7.3/schema schemas/schema.json
$ref: "https://schemas.sourcemeta.com/ossf/osv/v1.7.3/schema"
import schema from "https://schemas.sourcemeta.com/ossf/osv/v1.7.3/schema" with { type: "json" };
Identifierhttps://schemas.sourcemeta.com/ossf/osv/v1.7.3/schema
Base Dialect2020-12
Dialecthttps://json-schema.org/draft/2020-12/schema
Health
92%
Size0.011987 MB
Loading schema...

This schema declares 0 examples.

Loading...
Loading...

This schema has 11 quality errors.

/$defs/ecosystemNameorphan_definitions

Schema definitions in $defs or definitions that are never internally referenced can be removed

top_level_examples

Set a non-empty examples array at the top level of the schema to illustrate the expected data

/allOf/0/ifunnecessary_allof_wrapper

Keywords inside allOf that do not conflict with the parent schema can be elevated

/$defs/ecosystemName/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/$defs/severity/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/properties/affected/items/properties/ranges/items/allOf/1/if/properties/events/contains/required/0required_properties_in_properties

Every property listed in the required keyword must be explicitly defined using the properties keyword

/properties/affected/items/properties/ranges/items/allOf/1/then/not/properties/events/contains/required/0required_properties_in_properties

Every property listed in the required keyword must be explicitly defined using the properties keyword

/properties/affected/items/properties/ranges/items/properties/events/contains/required/0required_properties_in_properties

Every property listed in the required keyword must be explicitly defined using the properties keyword

/properties/affected/items/properties/ranges/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/properties/credits/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types

/properties/references/items/properties/type/enumenum_with_type

Setting type alongside enum is considered an anti-pattern, as the enumeration choices already imply their respective types