{
  "id": "osv",
  "name": "OSV",
  "category": "Software checks",
  "summary": "Retrieve structured open-source vulnerability advisories.",
  "capabilities": [
    "vulnerability.lookup",
    "package.vulnerability_query"
  ],
  "auth": "none",
  "auth_basis": "One anonymous advisory lookup passed. This observation is scoped to the GET endpoint.",
  "docs": "https://google.github.io/osv.dev/api/",
  "endpoint": "https://api.osv.dev/v1/vulns/{id}",
  "method": "GET",
  "limits": [
    "No advisory match is not evidence that a package is secure.",
    "The local check covers advisory retrieval, not package-query completeness."
  ],
  "example": "https://api.osv.dev/v1/vulns/GHSA-jfh8-c2jp-5v3q",
  "pricing": "No payment was required for the recorded lookup; future limits and other operations are not guaranteed.",
  "reviewed_at": "2026-10-17",
  "evidence": {
    "kind": "scoped_observation",
    "observation": {
      "service_id": "osv",
      "observed_at": "2026-10-17T15:09:22.986500+00:00",
      "method": "GET",
      "url": "https://api.osv.dev/v1/vulns/GHSA-jfh8-c2jp-5v3q",
      "assertion": "Return the requested advisory ID with an affected-package list",
      "scope": "One anonymous read-only request; no reliability, completeness, safety or future-availability guarantee.",
      "passed": true,
      "elapsed_ms": 238
    }
  },
  "constraints": {
    "retention_hours": null,
    "max_total_cost": null
  },
  "source_kind": "provider_documentation"
}