github.com/google/osv-scalibr@v0.4.1/guidedremediation/testdata/python/relax/requirements/result.json (about)

     1  {
     2    "ecosystem": "PyPI",
     3    "strategy": "relax",
     4    "vulnerabilities": [
     5      {
     6        "id": "OSV-000-001",
     7        "packages": [
     8          {
     9            "name": "bad1",
    10            "version": "1.0.0"
    11          }
    12        ]
    13      },
    14      {
    15        "id": "OSV-000-002",
    16        "packages": [
    17          {
    18            "name": "bad2",
    19            "version": "1.0.0"
    20          }
    21        ]
    22      },
    23      {
    24        "id": "OSV-000-003",
    25        "packages": [
    26          {
    27            "name": "bad3",
    28            "version": "1.0.0"
    29          }
    30        ]
    31      },
    32      {
    33        "id": "OSV-000-004",
    34        "packages": [
    35          {
    36            "name": "nofix",
    37            "version": "1.0.0"
    38          }
    39        ],
    40        "unactionable": true
    41      }
    42    ],
    43    "patches": [
    44      {
    45        "packageUpdates": [
    46          {
    47            "name": "direct2",
    48            "versionFrom": ">=1.0.0,<2.0.0",
    49            "versionTo": ">=2.0.0,<3.0.0",
    50            "transitive": false
    51          }
    52        ],
    53        "fixed": [
    54          {
    55            "id": "OSV-000-002",
    56            "packages": [
    57              {
    58                "name": "bad2",
    59                "version": "1.0.0"
    60              }
    61            ]
    62          }
    63        ]
    64      },
    65      {
    66        "packageUpdates": [
    67          {
    68            "name": "direct4",
    69            "versionFrom": "~=1.0.0",
    70            "versionTo": ">=2.0.0,<3.0.0",
    71            "transitive": false
    72          },
    73          {
    74            "name": "direct5",
    75            "versionFrom": "~=1.0.0",
    76            "versionTo": ">=3.0.0,<4.0.0",
    77            "transitive": false
    78          }
    79        ],
    80        "fixed": [
    81          {
    82            "id": "OSV-000-003",
    83            "packages": [
    84              {
    85                "name": "bad3",
    86                "version": "1.0.0"
    87              }
    88            ]
    89          }
    90        ]
    91      },
    92      {
    93        "packageUpdates": [
    94          {
    95            "name": "direct1",
    96            "versionFrom": "==1.0.0",
    97            "versionTo": "==2.0.0",
    98            "transitive": false
    99          },
   100          {
   101            "name": "direct10",
   102            "versionFrom": "~=1.0.0",
   103            "versionTo": ">=2.0.0,<3.0.0",
   104            "transitive": false
   105          },
   106          {
   107            "name": "direct6",
   108            "versionFrom": "== 1.0.0",
   109            "versionTo": "==1.0.1",
   110            "transitive": false
   111          },
   112          {
   113            "name": "direct7",
   114            "versionFrom": ">=1.0.0,<2.0.0",
   115            "versionTo": ">=2.0.0,<3.0.0",
   116            "transitive": false
   117          },
   118          {
   119            "name": "direct9",
   120            "versionFrom": "~=1.0.0",
   121            "versionTo": ">=2.0.0,<3.0.0",
   122            "transitive": false
   123          }
   124        ],
   125        "fixed": [
   126          {
   127            "id": "OSV-000-001",
   128            "packages": [
   129              {
   130                "name": "bad1",
   131                "version": "1.0.0"
   132              }
   133            ]
   134          }
   135        ]
   136      }
   137    ]
   138  }