API
Read-only snapshots. OpenAPI: parameters and response schemas.
| GET /api/v2 | Returns |
|---|---|
/packages | Summaries + filter counts. per_page: default 100, max 200.detail=full adds evidence and requires per_page≤20. |
/packages/{name} | Full package observations. |
/packages:batchGet | Full observations for 1–20 unique packages. Repeat names to specify request order. Any missing name fails the batch. |
/tracks/{id} | Saved version-track observation. |
/targets | OBS target identities. |
/status | Collection freshness, per-monitor coverage and grouped failures. |
/export | Complete, unpaginated snapshot, schema 2. |
Queries
monitorfocuses filtering. Repeatedincludeselects returned monitors (default: all). IDs come from the list response'smonitors.qsearches names.search=observationsadds fact values, restricted bymonitorwhen set. Matching uses case-insensitive substrings.- Ordinary search:
?Outdated&Yanked. Conditions intersect. States of the same build target and BuildSystems form unions:?rva23_failed+rva23_succeeded&Yanked,?buildsystem_cmake+buildsystem_pyproject. - Advanced Search:
?Outdated=AND&Advisory=OR&EOL=NOT. Operations run left to right from ALL.Group=AND|OR|NOTseals the preceding ungrouped conditions. Each group starts from ALL and cannot nest.advanced=1opens the editor without conditions. Do not mix bare flags and operators. - Ordinary counts show intersections. Alternatives within a selected build target or BuildSystem count additions under the other conditions. Advanced Search uses
next_logic=and|or|not(default: and): AND counts matches, OR counts additions, NOT counts removals. The operator affects counts, not current results. Each package counts once within the search and focused view. Check counts target coverage.
Build alternatives intersected with two alerts:
/api/v2/packages?rva23_failed=AND&rva23_unresolvable=OR&Group=AND&Advisory=AND&DepMismatch=ANDUse dimension/value for other predicates, such ascheck:security/error. The response includes the normalized query andquery_node_limit: conditions plus explicit or implicit union groups. Raw repeated conditions count before deduplication. Invalid or oversized queries return 422.
Find advisory evidence:
/api/v2/packages?monitor=security&search=observations&q=CVE-&include=security&detail=full&per_page=20Fetch known packages:
/api/v2/packages:batchGet?names=bash&names=openssl&include=version&include=security404 missing resource · 422 invalid package query · 503 no snapshot.
Preserve check and stale. Null means unknown. One snapshot per response, not across pages.
check.failures identifies failed subchecks, including partial results.check_groups counts the uncovered and failed filters.check_statuses retains the individual states.
Website display documents: /api/ui/packages,/api/ui/packages/{name}.