An open API service providing security vulnerability metadata for many open source software ecosystems.
This project is part of Ecosyste.ms: Tools and open datasets to support, sustain, and secure critical digital infrastructure.
Documentation for the REST API is available here: https://advisories.ecosyste.ms/docs
The default rate limit for the API is 5000/req per hour based on your IP address, get in contact if you need to to increase your rate limit.
For development and deployment documentation, check out DEVELOPMENT.md
Please do! The source code is hosted at GitHub. If you want something, open an issue or a pull request.
If you need want to contribute but don't know where to start, take a look at the issues tagged as "Help Wanted".
You can also help triage issues. This can include reproducing bug reports, or asking for vital information such as version numbers or reproduction instructions.
Finally, this is an open source project. If you would like to become a maintainer, we will consider adding you if you contribute frequently to the project. Feel free to ask.
For other updates, follow the project on Twitter: @ecosyste_ms.
- Fork the project.
- Make your feature addition or bug fix.
- Add tests for it. This is important so we don't break it in a future version unintentionally.
- Send a pull request. Bonus points for topic branches.
We support and encourage security research on Ecosyste.ms under the terms of our vulnerability disclosure policy.
Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.
Code is licensed under GNU Affero License © 2023 Andrew Nesbitt.
Data from the API is licensed under CC BY-SA 4.0.
