{"id":"osv-scanner","name":"OSV-Scanner","library":"Technical and passive OSINT","library_file":"05","category":"Open-source components","status":"Apache-2.0","sources":[{"label":"Repository","url":"https://github.com/google/osv-scanner"}],"links":[{"label":"Repository","url":"https://github.com/google/osv-scanner"}],"attributes":{"license_status":"Apache-2.0","purpose_and_i_o":"authorized manifests/lockfiles/SBOMs/images → package advisory matches","integration_fit":"CLI/Go, offline DB, JSON/SARIF/SBOM","passive_profile_and_limitations":"public artifact must be confidently attributed; package match does not prove deployed/reachable code","official_source":"Repository"},"defined_in":{"file":"05","file_slug":"technical-osint-tool-library","section":"2-deployable-open-source-components","table":"05.2-deployable-open-source-components.t1","line":18}}