Struct CrossReference 

pub struct CrossReference {
    pub advisory: String,
    pub aliases: Vec<String>,
    pub package: String,
    pub version: String,
    pub confirmed_by: usize,
    pub reports: Vec<CrossReferenceReport>,
}

One advisory in the cross-reference (ADR-0018 v1.1), as a serialisable view.

A view, not a record: every finding it names is still in its own layer under its own key, and SecurityListReport::findings still counts them all. That is what makes a duplicate pair read as one advisory confirmed by two analyzers rather than as a count that silently halved.

Fields

advisory: String

The advisory’s canonical id — the RUSTSEC id where both sides publish one.

aliases: Vec<String>

Every identifier it is published under.

package: String

The package and resolved version it is about.

version: String

That package’s resolved version.

confirmed_by: usize

How many distinct analyzers reported it. 1 is a normal state, not a discrepancy: the two databases are pinned independently, and yanked is not an advisory kind OSV can carry at all.

reports: Vec<CrossReferenceReport>

Which analyzers, and the still-addressable finding key each one wrote.

Trait Implementations

impl Clone for CrossReference

fn clone(&self) -> CrossReference

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CrossReference

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<Correspondence> for CrossReference

fn from(c: Correspondence) -> Self

Converts to this type from the input type.

impl Serialize for CrossReference

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.