Go Vulnerability Database generator version

This file tracks modifications to the OSV generation.

The modified timestamp of reports is set based on the timestamp of the last commit affecting this file.

When making a change that affects the generator, add a new entry to the changelog below (most recent first). Do not otherwise change this file.


  • Started storing the OSV for all reports in data/osv. Database generation will use this data rather than the YAML, ensuring that we always detect modifications to the generated OSV when setting the modified timestamp. Recording this change here in the same commit that adds data/osv ensures modification times remain the same when we switch generation methods.

  • Changed affected.package to contain the module path rather than the package path.