Struct OsvImportRecord 

pub struct OsvImportRecord {
    pub id: String,
    pub modified: Option<String>,
    pub summary: Option<String>,
    pub details: Option<String>,
    pub affected: Vec<OsvAffected>,
    pub severity: Vec<OsvSeverity>,
    pub database_specific: Option<Value>,
}

Upstream advisory shape, trimmed to just the fields the importer reads. Anything not modeled here is preserved verbatim in extra_json.

Fields

id: String

Upstream id — e.g. GHSA-xxx-xxx-xxx, CVE-2024-1234.

modified: Option<String>

Optional ISO-8601 modified timestamp from the advisory. Used to pick the newer record when the same advisory_id is imported twice.

summary: Option<String>

Human-readable summary. Falls back to details on import.

details: Option<String>

affected: Vec<OsvAffected>

Each affected[] entry names a single package and the version ranges it applies to. Kept alongside the record so the scanner can do precise range checks later.

severity: Vec<OsvSeverity>

CVSS or SSVC severity. First entry is used as the coarse bucket.

database_specific: Option<Value>

GHSA + a handful of other feeds park a qualitative severity label ("CRITICAL", "HIGH", …) inside database_specific.severity when the top-level CVSS vector is absent. We keep the whole database_specific object loose since its shape varies by feed.

Implementations

impl OsvImportRecord

pub fn severity_bucket(&self) -> &'static str

Map the record’s severity vector to one of the four coarse buckets the scanner surfaces. OSV files mix CVSS 3.1 vectors and plain numeric strings; we handle the common shapes and default to "medium" for anything unrecognized rather than dropping the advisory on the floor.

pub fn human_summary(&self) -> String

Best-effort summary. OSV advisories may omit summary in favor of a multi-paragraph details body; we take the first non-empty of the two.

Trait Implementations

impl Clone for OsvImportRecord

fn clone(&self) -> OsvImportRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OsvImportRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OsvImportRecord

fn deserialize<__D>( __deserializer: __D, ) -> Result<OsvImportRecord, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for OsvImportRecord

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.