Supported ecosystems & source

Extraits de code

curl "https://api.oanor.com/osv-api/v1/meta" \
  -H "x-oanor-key: oanor_test_..."

await fetch("https://api.oanor.com/osv-api/v1/meta", {
  headers: { "x-oanor-key": "oanor_test_..." }
});

$ch = curl_init("https://api.oanor.com/osv-api/v1/meta");
curl_setopt($ch, CURLOPT_HTTPHEADER, ["x-oanor-key: oanor_test_..."]);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$out = curl_exec($ch);

import requests
requests.get(
    "https://api.oanor.com/osv-api/v1/meta",
    headers={"x-oanor-key": "oanor_test_..."}
)

Exemple de réponse

Une réponse réelle de ce endpoint, capturée lors du dernier contrôle de santé.

{
    "data": {
        "note": "Live OSV.dev data. /v1/scan = vulnerabilities affecting a specific package VERSION (the supply-chain check); /v1/package = every known advisory for a package; /v1/vulnerability = a single advisory (GHSA/PYSEC/GO/RUSTSEC/CVE…) in detail with CVSS, CWE, affected packages and references. Ecosystem aliases are accepted (pip→PyPI, cargo→crates.io, gem→RubyGems, composer→Packagist, …).",
        "source": "OSV — the Open Source Vulnerabilities database (osv.dev)",
        "endpoints": [
            "/v1/scan",
            "/v1/package",
            "/v1/vulnerability",
            "/v1/meta"
        ],
        "ecosystems": [
            "PyPI",
            "npm",
            "Go",
            "crates.io",
            "Maven",
            "NuGet",
            "RubyGems",
            "Packagist",
            "Hex",
            "Pub",
            "CRAN",
            "Debian",
            "Alpine",
            "Ubuntu",
            "GitHub Actions"
        ]
    },
    "meta": {
        "timestamp": "2026-05-31T13:21:03.922Z",
        "request_id": "0b4bd9bc-d46b-4795-868a-a680f25d2602"
    },
    "status": "ok",
    "message": "Meta retrieved",
    "success": true
}