google/osv.dev
Open source vulnerability DB and triage service.
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
No releases in the last 90 days; the most recent was 195 days ago, with 111 contributors on GitHub.
Use Cases & Benefits
- Provides an open source vulnerability database and triage service for managing software security issues.
- Centralizes and standardizes vulnerability data with an API and web interface for easy integration and querying.
- Use for scanning software dependencies against known vulnerabilities using the OSV API and supported lockfiles.
- Use for deploying and managing a scalable vulnerability database service on Google Cloud Platform with Terraform.
- Use for integrating vulnerability data into security tools and workflows via language bindings and API access.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
Apache 2.0
Permissive: commercial use, modification and redistribution are allowed with attribution; includes an explicit patent grant from contributors.
Community files
- README: present
- Contributing guide: present
- Code of conduct: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
Comprehensive documentation is available here. API documentation is available here.
We have data dumps available from a GCS bucket at
gs://osv-vulnerabilities. For more information check out our documentation.An instance of OSV's web UI is deployed at https://osv.dev.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
Forks
391+43
Open issues
174-2
Compared with peers in Security
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| cloudflare/security-audit-skill | 61.7K | +8.8K | 17 | — |
| KeygraphHQ/shannon | 51.2K | +1.1K | 32 | 8 days ago |
| vxcontrol/pentagi | 33.5K | +712 | 38 | 31 days ago |
| Asymptote-Labs/agent-beacon | 3.3K | +360 | 40 | today |
| caddyserver/caddy | 78.8K | +267 | 60 | 1 day ago |
| google/osv.dev | 3.0K | — | 54 | 195 days ago |
| Category median | 51.2K | +712 | 38 | — |
Also by google
Other repositories from this maintainer that GStars tracks
- 54.2K stars
material-design-icons
Material Design icons by Google (Material Symbols)
- Java51.9K stars
guava
Google core libraries for Java
- JavaScript45.8K stars
zx
A tool for writing better scripts
- C++39.7K stars
googletest
GoogleTest - Google Testing and Mocking Framework
- Python39.0K stars
langextract
A Python library for extracting structured information from unstructured text using LLMs with precise source grounding and interactive visualization.
Discover Repositories
Search across tracked repositories by name or description