| # Go Vulnerability Database generator version | |
| This file tracks modifications to the OSV generation. | |
| The `modified` timestamp of reports is set based on the timestamp | |
| of the last commit affecting this file. | |
| When making a change that affects the generator, add a new entry | |
| to the changelog below (most recent first). Do not otherwise change | |
| this file. | |
| ## Changelog | |
| * Started storing the OSV for all reports in `data/osv`. | |
| Database generation will use this data rather than the YAML, | |
| ensuring that we always detect modifications to the generated | |
| OSV when setting the `modified` timestamp. Recording this change | |
| here in the same commit that adds `data/osv` ensures modification | |
| times remain the same when we switch generation methods. | |
| * Changed `affected.package` to contain the module path | |
| rather than the package path. |