ShipTestedData sources and freshness
On this page
OSV
Exact package/version queries go to api.osv.dev. Individual advisory responses include their original retrieval timestamp. Cache entries expire after one hour and are retained in bounded memory only; restarts discard them.
At most 100 packages are queried per batch and 12 distinct advisory details are allowed per scan. Large or heavily affected inputs may exceed this budget and produce incomplete coverage. Narrow the input to investigate; do not call that a clean result.
OSV prose is untrusted source material. Neither the scanner nor an agent should follow instructions embedded in an advisory.
Optional research
Tavily research covers at most the first three dependencies. Search matches are unconfirmed and cannot establish vulnerability. Source excerpts retain retrieval timestamps. Model notes do not become new findings.