Struct npm_parser::audit::Advisory

pub struct Advisory {

    pub id: u64,
    pub title: String,
    pub findings: Vec<Finding>,
    pub vulnerable_versions: Option<String>,
    pub module_name: Option<String>,
    pub severity: Severity,
    pub github_advisory_id: Option<String>,
    pub cves: Option<Vec<String>>,
    pub access: String,
    pub patched_versions: Option<String>,
    pub recommendation: String,
    pub cwe: Option<Vec<String>>,
    pub found_by: Option<String>,
    pub reported_by: Option<String>,
    pub created: OffsetDateTime,
    pub updated: Option<OffsetDateTime>,
    pub deleted: Option<OffsetDateTime>,
    pub references: Option<String>,
    pub npm_advisory_id: Option<String>,
    pub overview: String,
    pub url: String,
}

advisory in report version 1

there is a field metadata in the output here but since I could not find information on its structure it is not parsed (was always null for me)

Fields

id: u64

numeric id

title: String

human readable title

findings: Vec<Finding>

where was the module affected by this advisory found in the dependency tree

vulnerable_versions: Option<String>

which versions of the affected module are vulnerable

module_name: Option<String>

name of the affected node module

severity: Severity

how severe is the issue

github_advisory_id: Option<String>

GitHub advisory Id

cves: Option<Vec<String>>

CVE numbers

access: String

if this advisory is public

patched_versions: Option<String>

which versions of the affected package are patched

recommendation: String

a human readable recommendation on how to fix this

cwe: Option<Vec<String>>

a CWE (common weakness enumeration) identifier

found_by: Option<String>

who found this security issue

reported_by: Option<String>

who reported this security issue

created: OffsetDateTime

when was this advisory created

updated: Option<OffsetDateTime>

when was this advisory last updated

deleted: Option<OffsetDateTime>

when was this deleted

references: Option<String>

external references, all in one String, with newlines

npm_advisory_id: Option<String>

npm advisory id

overview: String

human-readable description

url: String

URL to learn more

Trait Implementations

impl Debug for Advisory

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Advisory

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for Advisory

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.