Interface OsvQueryParams

Parameters for a single vulnerability query (POST /v1/query).

Provide either package + version to query by package version, or commit to query by a specific git commit hash.

// Query by package + version
const result = await osv.query({
package: { name: 'lodash', ecosystem: 'npm' },
version: '4.17.20',
});

// Query by git commit
const result = await osv.query({ commit: 'abc123...' });
interface OsvQueryParams {
    commit?: string;
    package?: OsvPackageIdentifier;
    page_size?: number;
    page_token?: string;
    version?: string;
}

Properties

commit?: string

Git commit hash to query vulnerabilities for

Package to query — use alongside version

page_size?: number

Maximum number of results to return

page_token?: string

Token for retrieving the next page of results

version?: string

Package version string to query vulnerabilities for