_content/security/vuln: update wording about x/vuln package
Change-Id: Icfa39682fd15401b59766ec1f60636a215371ba7
Reviewed-on: https://go-review.googlesource.com/c/website/+/475055
Run-TryBot: Tatiana Bradley <tatianabradley@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatianabradley@google.com>
Reviewed-by: Julie Qiu <julieqiu@google.com>
diff --git a/_content/security/vuln/database.md b/_content/security/vuln/database.md
index ef6e191..ef252c4 100644
--- a/_content/security/vuln/database.md
+++ b/_content/security/vuln/database.md
@@ -11,10 +11,7 @@
serves Go vulnerability information in the
[Open Source Vulnerability (OSV) schema](https://ossf.github.io/osv-schema/).
-We recommend using
-[golang.org/x/vuln/client](https://pkg.go.dev/golang.org/x/vuln/client) to read
-data from the Go vulnerability database. You can also browse vulnerabilities
-in the database at [pkg.go.dev/vuln](https://pkg.go.dev/vuln).
+You can also browse vulnerabilities in the database at [pkg.go.dev/vuln](https://pkg.go.dev/vuln).
**Do not** rely on the contents of the x/vulndb Git repository. The YAML files in that
repository are maintained using an internal format that may change
@@ -104,8 +101,7 @@
The
[affected[].ecosystem_specific](https://ossf.github.io/osv-schema/#affectedecosystem_specific-field)
field is a JSON object with additional information about the vulnerability,
-which is used by [package
-vulncheck](https://pkg.go.dev/golang.org/x/vuln/vulncheck).
+which is used by Go's vulnerability detection tools.
For now, ecosystem specific will always be an object with a single field,
`imports`.
diff --git a/_content/security/vuln/index.md b/_content/security/vuln/index.md
index 070129a..5ccd258 100644
--- a/_content/security/vuln/index.md
+++ b/_content/security/vuln/index.md
@@ -71,9 +71,8 @@
### Vulnerability Detection for Go
-Go’s vulnerability detection package, [vulncheck](https://golang.org/x/vuln/vulncheck),
-aims to provide a low-noise, reliable way for Go users to learn about known
-vulnerabilities that may affect their projects.
+Go’s vulnerability detection aims to provide a low-noise, reliable way for Go
+users to learn about known vulnerabilities that may affect their projects.
Vulnerability checking is integrated into Go's tools and services, including
a new command line tool, [govulncheck](https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck),
the [Go package discovery site](https://pkg.go.dev), and soon,
