OSV
AssessTools
Open Source Vulnerabilities schema used to publish advisory records.
Why it's here
Placed in Assess: 1 article(s) of evidence from 1 source(s), led by security coverage, with 1 in the last 30 days. Confidence 24%. Low accumulated evidence, so it defaults conservatively pending more signal.
Evidence (1)
- 8GitHub Blog·8/6/2026securityGitHub expands malware advisories beyond npm
GitHub says Dependabot malware advisories now cover eight package ecosystems, including PyPI, by ingesting reports from OpenSSF’s malicious-packages repository. The update replaces a GitHub-only npm path with a shared importer that validates and normalizes OSV-format malware reports before they reach the advisory database.