osv.dev
Developed by google
osv.dev is an open-source vulnerability database and triage service launched by Google. It aims to improve vulnerability triage for developers and consumers of open-source software by providing precise data on where a vulnerability was introduced and where it got fixed. Utilizing the open-source OSV schema, it aggregates security advisories from various ecosystems like GitHub, PyPI, Go, Rust, and Debian. It offers an easy-to-use API and the CLI tool OSV-Scanner, enabling automated dependency scanning and remediation to enhance software supply chain security.
- Unified OSV open-source schema
- Multi-ecosystem security advisory aggregation
- Precise tracking of introduction and fix versions
- Developer-friendly high-performance query API
- First-party CLI tool integration (OSV-Scanner)
web