cve

type Affected struct {
	Ecosystem string         `json:"ecosystem"`           // "npm", "PyPI", "Go", "Maven", "crates.io", etc.
	Package   string         `json:"package"`             // Package name
	Ranges    []VersionRange `json:"ranges,omitempty"`    // Affected version ranges
	Versions  []string       `json:"versions,omitempty"`  // Specific affected versions
	Functions []string       `json:"functions,omitempty"` // Vulnerable functions (if known)
}

type Aggregator struct {
	// contains filtered or unexported fields
}

type CVE struct {
	ID          string     `json:"id"`          // e.g. "CVE-2026-31337"
	Description string     `json:"description"` // Human-readable description
	Severity    string     `json:"severity"`    // "CRITICAL", "HIGH", "MEDIUM", "LOW"
	CVSSScore   float64    `json:"cvss_score"`  // 0.0 - 10.0
	CVSSVector  string     `json:"cvss_vector,omitempty"`
	Published   time.Time  `json:"published"`
	Modified    time.Time  `json:"modified"`
	References  []string   `json:"references,omitempty"` // URLs to advisories, patches
	Affected    []Affected `json:"affected"`             // Which packages/products are affected
	HasExploit  bool       `json:"has_exploit"`          // PoC exists on ExploitDB
	InTheWild   bool       `json:"in_the_wild"`          // In CISA KEV (actively exploited)
	Sources     []string   `json:"sources"`              // Which data sources contributed
}

type CallSite struct {
	File     string `json:"file"`
	Line     int    `json:"line"`
	Function string `json:"function"` // The function being called
	Snippet  string `json:"snippet"`  // The line of code
}

type ExploitDBClient struct {
	// contains filtered or unexported fields
}

type Finding struct {
	CVE          CVE         `json:"cve"`
	MatchedDep   MatchedDep  `json:"matched_dep"`             // Which dependency matched
	Reachable    bool        `json:"reachable"`               // Is the vulnerable function called?
	CallSites    []CallSite  `json:"call_sites,omitempty"`    // Where it's called
	TaintedInput bool        `json:"tainted_input"`           // Does user input reach it?
	InputSource  string      `json:"input_source,omitempty"`  // e.g. "HTTP POST body"
	Exposed      bool        `json:"exposed"`                 // Is it on a public endpoint?
	ExposurePath string      `json:"exposure_path,omitempty"` // e.g. "POST /api/import"
	Verdict      VerdictType `json:"verdict"`
	Fix          string      `json:"fix,omitempty"` // Remediation command
	FixBreaking  bool        `json:"fix_breaking"`  // Does the fix have breaking changes?
}

type GHSAClient struct {
	// contains filtered or unexported fields
}

type KEVClient struct {
	// contains filtered or unexported fields
}

type MatchedDep struct {
	Name       string `json:"name"`             // e.g. "lxml"
	Version    string `json:"version"`          // e.g. "4.9.1"
	Ecosystem  string `json:"ecosystem"`        // e.g. "PyPI"
	LockFile   string `json:"lock_file"`        // e.g. "requirements.txt"
	Transitive bool   `json:"transitive"`       // Is it a transitive (indirect) dependency?
	Parent     string `json:"parent,omitempty"` // If transitive, who depends on it?
}

type NVDClient struct {
	// contains filtered or unexported fields
}

type OSVClient struct {
	// contains filtered or unexported fields
}

type OfflineDB struct {
	// contains filtered or unexported fields
}

type ScanResult struct {
	Target      string    `json:"target"`
	ScannedAt   time.Time `json:"scanned_at"`
	Duration    string    `json:"duration"`
	TotalDeps   int       `json:"total_deps"`
	Ecosystems  []string  `json:"ecosystems"`
	Findings    []Finding `json:"findings"`
	Exploitable int       `json:"exploitable"`
	Reachable   int       `json:"reachable"`
	Noise       int       `json:"noise"`
}

type VerdictType string

type VersionRange struct {
	Type         string `json:"type"`                 // "SEMVER", "ECOSYSTEM", "GIT"
	Introduced   string `json:"introduced,omitempty"` // First affected version
	Fixed        string `json:"fixed,omitempty"`      // First fixed version
	LastAffected string `json:"last_affected,omitempty"`
}