{"version":1,"source":"OSV","ecosystems":[{"name":"npm","managers":["npm","yarn","pnpm","bun"]},{"name":"PyPI","managers":["pip","pip3","pipenv","poetry","uv","pdm"]},{"name":"crates.io","managers":["cargo","rust"]},{"name":"Go","managers":["go","gomod","go-modules"]},{"name":"Maven","managers":["maven","mvn","gradle"]},{"name":"NuGet","managers":["nuget","dotnet"]},{"name":"Packagist","managers":["composer"]},{"name":"RubyGems","managers":["gem","bundler","bundle"]},{"name":"Hex","managers":["hex","mix","rebar3"]},{"name":"Pub","managers":["pub","dart","flutter"]},{"name":"Hackage","managers":["cabal","stack"]},{"name":"opam","managers":["opam","ocaml"]},{"name":"SwiftURL","managers":["swift","swiftpm","swift-package-manager"]},{"name":"CRAN","managers":["cran"]},{"name":"Bioconductor","managers":["bioconductor","biocmanager"]},{"name":"Julia","managers":["julia"]},{"name":"GitHub Actions","managers":["github-actions"]},{"name":"Bitnami","managers":["bitnami"]},{"name":"GHC","managers":["ghc"]},{"name":"Alpine","managers":["apk"],"releaseRequired":true},{"name":"Debian","managers":["dpkg"],"releaseRequired":true},{"name":"Ubuntu","managers":[],"releaseRequired":true},{"name":"AlmaLinux","managers":[],"releaseRequired":true},{"name":"Rocky Linux","managers":["rocky"],"releaseRequired":true},{"name":"Red Hat","managers":["rhel"],"releaseRequired":true},{"name":"openSUSE","managers":[],"releaseRequired":true},{"name":"SUSE","managers":[],"releaseRequired":true},{"name":"Azure Linux","managers":[],"releaseRequired":true},{"name":"Alpaquita","managers":[],"releaseRequired":true},{"name":"Mageia","managers":[],"releaseRequired":true},{"name":"openEuler","managers":[],"releaseRequired":true},{"name":"Photon OS","managers":[],"releaseRequired":true},{"name":"Wolfi","managers":["wolfi"]},{"name":"Chainguard","managers":["chainguard"]},{"name":"CleanStart","managers":[]},{"name":"MinimOS","managers":[]},{"name":"BellSoft Hardened Containers","managers":[],"releaseRequired":true},{"name":"Docker Hardened Images","managers":[]}],"inputs":["packages","CycloneDX JSON","SPDX 2.x JSON"],"maxPackages":100,"cacheSeconds":900,"notes":["Manager aliases use their underlying registry ecosystem.","Distribution checks require the source package name and distribution release.","Package URL support is a subset of ecosystems; use explicit ecosystem/name/version for others.","Coverage depends on upstream advisories. An empty match is not proof that a package is safe."]}