API referenceReference
`/v1/advisories/{id}/packages/{package}` — one expanded package group, loaded lazily when the UI opens a group. Carries the group's full (still bounded) evidence; the package-specific applicability projection stacks onto this response.
Path Parameters
id*string
Canonical advisory id, source advisory id, or alias
package*string
Exact conda-forge package name
Response Body
application/json
curl -X GET "https://example.com/v1/advisories/CVE-2023-38545/packages/curl"{ "canonical_id": "string", "package": { "affected_version_count": 0, "applicability": "string", "ecosystem": "string", "evidence": [ { "active_on_latest": true, "affected_version_count": 0, "affected_version_preview": [ "string" ], "applicability": "string", "comparator": "string", "fix_version": "string", "identity": { "coordinates": null, "ecosystem": "string", "kind": "string", "position": 0, "primary": true, "provenance": { "availability": "string", "confidence": 0, "review": null, "source": "string", "source_evidence": [ "string" ] }, "role": "string", "value": "string", "verified": true }, "provenance": null, "source_advisory_id": "string", "source_kind": "string" } ], "evidence_total": 0, "fix_version": "string", "latest_status": "affected", "latest_version": "string", "package_name": "string" }}Empty
`/v1/advisories/{id}/packages` — one row per matched package. Match rows are grouped by package across all source records and identities before the name filter, the latest-version totals, sorting, and windowing. Ordering is deterministic: latest-affected groups first, then package name. GET
Previous Page
`/v1/advisories/{id}/packages/{package}/applicability` — the matcher-owned typed applicability projection for one expanded package group, loaded lazily and separately from the advisory detail and package windows. GET
Next Page