{"as_of":"2026-11-08T08:27:51.280Z","ecosystems":["Go","Hex","Maven","NuGet","Pub","PyPI","RubyGems","SwiftURL","actions","composer","crates.io","erlang","go","maven","npm","nuget","php","pip","pub","rubygems","rust","swift","unknown"],"matching_schemes":["SEMVER","PHP","COMPOSER"],"limitations":["Public reports describe source-listed scope, not the applicability of an issue to your deployment.","The connected evaluator is a development preview. No software entitlement is included with the Field Kit.","Unsupported version semantics, incomplete coverage, missing facts and stale deployment evidence remain unknown.","GitHub, OSV, NVD and CVE records can mirror the same publisher assertion; multiple links are not independent corroboration.","Publisher prose and mixed-license OSV records remain private pending rights and editorial review."],"source_health":[{"source_id":"cisa-kev","scope":"Complete CISA Known Exploited Vulnerabilities catalog; linked third-party material excluded.","state":"degraded","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T08:04:55.316Z","last_complete_sync_at":"2026-11-03T17:43:52.203Z","interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"Complete CISA Known Exploited Vulnerabilities catalog; linked third-party material excluded."},{"source_id":"cve-list-v5","scope":"Commit-pinned CVE records referenced by the intake registry. Full CVE history is not covered.","state":"degraded","last_attempt_at":"2026-10-31T21:41:03.389Z","last_successful_fetch_at":"2026-11-08T08:05:01.383Z","last_complete_sync_at":"2026-10-31T20:54:13.377Z","interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"Commit-pinned CVE records referenced by the intake registry. Full CVE history is not covered."},{"source_id":"first-epss","scope":"Daily EPSS enrichment for CVE identifiers already present in the registry. Missing scores remain unknown.","state":"degraded","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T08:05:05.504Z","last_complete_sync_at":"2026-10-31T20:54:10.891Z","interval_seconds":86400,"stale_after_seconds":129600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"Daily EPSS enrichment for CVE identifiers already present in the registry. Missing scores remain unknown."},{"source_id":"github-malware","scope":"GitHub malware lane; full historical pagination remains partial until bootstrap finishes.","state":"degraded","last_attempt_at":"2026-10-31T20:52:27.835Z","last_successful_fetch_at":"2026-11-08T08:02:53.038Z","last_complete_sync_at":null,"interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"GitHub malware lane; full historical pagination remains partial until bootstrap finishes."},{"source_id":"github-reviewed","scope":"GitHub reviewed lane; full historical pagination remains partial until bootstrap finishes.","state":"degraded","last_attempt_at":"2026-10-31T20:52:27.835Z","last_successful_fetch_at":"2026-11-08T08:04:57.543Z","last_complete_sync_at":null,"interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["partial_fetch"],"public_note":"GitHub reviewed lane; full historical pagination remains partial until bootstrap finishes."},{"source_id":"github-unreviewed","scope":"GitHub unreviewed lane; full historical pagination remains partial until bootstrap finishes.","state":"degraded","last_attempt_at":"2026-10-31T20:52:27.835Z","last_successful_fetch_at":"2026-11-08T01:48:22.322Z","last_complete_sync_at":null,"interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"GitHub unreviewed lane; full historical pagination remains partial until bootstrap finishes."},{"source_id":"node-publisher","scope":"Official vulnerability index and approved linked notices; grouped CVEs remain distinct. Editorial summaries require review.","state":"degraded","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T08:05:04.608Z","last_complete_sync_at":"2026-11-07T07:00:28.617Z","interval_seconds":3600,"stale_after_seconds":10800,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"Official vulnerability index and approved linked notices; grouped CVEs remain distinct. Editorial summaries require review."},{"source_id":"nvd","scope":"NVD enrichment for registered CVE identifiers; resumable modified-window backfill is optional. Associated CPE edits have separate freshness.","state":"degraded","last_attempt_at":"2026-11-04T17:57:13.809Z","last_successful_fetch_at":"2026-11-08T08:05:01.878Z","last_complete_sync_at":null,"interval_seconds":7200,"stale_after_seconds":21600,"coverage_complete":false,"reason_codes":["scope_expanded"],"public_note":"NVD enrichment for registered CVE identifiers; resumable modified-window backfill is optional. Associated CPE edits have separate freshness."},{"source_id":"osv-npm","scope":"OSV npm delta index. GHSA-origin data permitted; other publishers retained for rights review. Historical bootstrap is explicit.","state":"degraded","last_attempt_at":"2026-10-31T20:52:27.835Z","last_successful_fetch_at":"2026-11-08T08:05:00.959Z","last_complete_sync_at":null,"interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"OSV npm delta index. GHSA-origin data permitted; other publishers retained for rights review. Historical bootstrap is explicit."},{"source_id":"osv-packagist","scope":"OSV Packagist delta index. GHSA-origin data permitted; other publishers retained for rights review. Historical bootstrap is explicit.","state":"degraded","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T01:45:40.054Z","last_complete_sync_at":"2026-10-31T23:13:06.930Z","interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"OSV Packagist delta index. GHSA-origin data permitted; other publishers retained for rights review. Historical bootstrap is explicit."},{"source_id":"osv-withdrawals","scope":"OSV [EMPTY] delta index. GHSA-origin data permitted; other publishers retained for rights review. Historical bootstrap is explicit.","state":"degraded","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T01:47:34.293Z","last_complete_sync_at":"2026-11-07T13:57:07.232Z","interval_seconds":900,"stale_after_seconds":3600,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"OSV [EMPTY] delta index. GHSA-origin data permitted; other publishers retained for rights review. Historical bootstrap is explicit."},{"source_id":"php-publisher","scope":"PHP 8 changelog and current support table; factual intake, reviewed publication only.","state":"degraded","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T08:05:04.899Z","last_complete_sync_at":"2026-11-05T03:47:18.701Z","interval_seconds":3600,"stale_after_seconds":10800,"coverage_complete":false,"reason_codes":["normalization_gap"],"public_note":"PHP 8 changelog and current support table; factual intake, reviewed publication only."},{"source_id":"vendor-incident-hf","scope":"One historical May 31, 2024 Spaces disclosure. Not a current vendor-incident discovery feed.","state":"healthy","last_attempt_at":"2026-11-08T08:02:51.671Z","last_successful_fetch_at":"2026-11-08T08:04:56.451Z","last_complete_sync_at":"2026-11-08T08:04:56.451Z","interval_seconds":3600,"stale_after_seconds":10800,"coverage_complete":true,"reason_codes":["complete"],"public_note":"One historical May 31, 2024 Spaces disclosure. Not a current vendor-incident discovery feed."}]}