Skip to content

Conversation

@illuusio
Copy link
Contributor

@illuusio illuusio commented Nov 12, 2025

Remove VuXML from code and add OSV JSON code. Code makes sure that there should be drop-in placement compatibility.

Before merging there should be ready:

  • VuXML code remove
  • OSVf reading and checking
  • Update pkg config keys (OSVF_SITE and VUXML_SITE)
  • Update Testcases for pkg audit
  • Remove not needed external/yxml as it not anywhere than pkg_audio.c
  • Update OSV schema validation to have correct released osv-schema.
  • OSV FreeBSD vulnerability database released
  • Change testing OSVF_SITE url to correct one

Testing OSV database can be found from: freebsd-osv.json

As FreeBSD OSV database ain't yet release this commit is WIP and should not be merged.

@illuusio illuusio force-pushed the osvf-audit branch 3 times, most recently from ec620f1 to 705e95c Compare November 13, 2025 08:43
Remove VuXML from code and add OSV JSON code. Code
makes sure that there should be drop-in placement
compatibility.

Update OSV-schema to official one

As FreeBSD OSV database ain't yet release this
commit is WIP and should not be merged.
Fixing testcases to work with OSV and some changes
that had to be made to come along with real world.
Remove yxml as it no currently used anywhere. VuXML which was only
user for yxml is replaced with OSVf which uses libucl.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant