Hacker GitHub

← All repos

pypa/advisory-database

View on GitHub ↗ ★ 379 Shell

Advisory database for Python packages published on pypi.org

4 mentions on Hacker News by 4 people: 0 stories, 4 comments · first 2022-08-11 · latest 2026-04-13

Mentions per year 4 mentions · busiest year 2026 (2)
20082026
AllStoriesComments NewestTopOldest
  1. …for packages with known vulnerabilities. It uses the Python Packaging Advisory Database ( https://github.com/pypa/advisory-database ) via the PyPI JSON API as a source of vulnerability reports.
    comment by krunck · 2026-04-13 · in Pip-Audit
  2. You can use the PYSEC[1] or OSV[2] databases. [1]: https://github.com/pypa/advisory-database/blob/main/vulns/te... [2]: https://osv.dev/vulnerability/MAL-2026-2254
    comment by woodruffw · 2026-03-27 · in Telnyx package compromised on PyPI
  3. …api is 0.109.1. Or even better, give the link and print the fixed version from the advisory yaml https://github.com/pypa/advisory-database/blob/main/vulns/fa...
    comment by scsh · 2025-05-03 · in Show HN: Pipask – safer pip without compromising convenience
  4. …those who get their PyPI packages from distributions rather than via pip. pypa/advisory-database: https://github.com/pypa/advisory-database
    comment by westurner · 2022-08-11 · in Adding Auditing to Pip