A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

python dependency vulnerability scanner, written in Rust.

☠️ Ground-truth dataset for vulnerability prediction (known research datasets and data sources included such as NVD, CVE Details and OSV); tools to automatically update the data are provided.

Turn an Erlang/OTP application into a Unikernel image

Parse and compare all the package versions and all the ranges. From debian, npm, pypi, ruby and more. Process all the version range specs and expressions. This project is sponsored by an NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ , the Google Summer of Code, nexB and others generous sponsors!

Artifacts, including experiments and graphs, for the paper: "Unikraft: Fast, Specialized Unikernels the Easy Way" (EuroSys'21 - Best Paper Award).

Capstan, a tool for packaging and running your application on OSv.

A collection of packages for using GitHub security advisories in Node.js.

Simple Node.js Microservice application use to demonstrate the use of OSv and Capstan

A .NET library for Open Source Vulnerabilities (OSV) schema and API client.

A Spring Boot application configured to run on OSv.

Kotlin and Java serialization schema for OSV

HTML5 command line terminal for OSv

Build a local copy of Open Source Vulnerabilities; OSV. Server mode for easy querying.

osv.dev API clone

Autonomous “Shai-Hulud” engine that ingests malicious NPM package advisories from OSV, tracks versions and metadata, and maintains a continuously updated threat intelligence database.

OSV: OSPF Vulnerability Checking tool

The Unikernel Compilation and Deployment Platform