Google OSV
An open-source vulnerability database maintained by Google that aggregates security advisories from multiple ecosystems. It provides a free, unlimited API for queries and does not include automatic fix patches.
Timeline (last 90 days)
RepoPilot uses Google OSV as a free data source to check for known security vulnerabilities in project dependencies, without needing to integrate a paid API.
Google OSV is an open-source vulnerability database maintained by Google that aggregates security advisories from multiple ecosystems such as GitHub Advisory, PyPA, and npm, and provides a free API for queries.
Unlike commercial solutions such as Snyk and GitHub Advanced Security, Google OSV does not limit query volume and requires no paid key.
Google OSV queries usually do not include automatic fix patches, and the upgrade path needs to be determined manually.
All Facts (4)
RepoPilot uses Google OSV as a free data source to check for known security vulnerabilities in project dependencies, without needing to integrate a paid API.
50%UnverifiedGoogle OSV is an open-source vulnerability database maintained by Google that aggregates security advisories from multiple ecosystems such as GitHub Advisory, PyPA, and npm, and provides a free API for queries.
50%UnverifiedUnlike commercial solutions such as Snyk and GitHub Advanced Security, Google OSV does not limit query volume and requires no paid key.
50%UnverifiedGoogle OSV queries usually do not include automatic fix patches, and the upgrade path needs to be determined manually.
50%