#advisory #vulnerabilities #security #json-schema

csaf

An implementation of the Common Security Advisory Framework (CSAF)

5 unstable releases

0.5.0 May 8, 2023
0.4.0 Mar 11, 2023
0.3.2 Nov 10, 2021
0.3.1 Oct 10, 2021
0.3.0 Oct 10, 2021

#1835 in Parser implementations

Download history 35/week @ 2024-07-20 77/week @ 2024-07-27 69/week @ 2024-08-03 3/week @ 2024-08-10 39/week @ 2024-08-24 62/week @ 2024-08-31 41/week @ 2024-09-07 29/week @ 2024-09-14 16/week @ 2024-09-21 4/week @ 2024-09-28 4/week @ 2024-10-05 12/week @ 2024-10-12 3/week @ 2024-10-19 38/week @ 2024-10-26 51/week @ 2024-11-02

104 downloads per month
Used in 3 crates

MIT license

75KB
913 lines

Common Security Advisory Framework (CSAF)

Crates.io Crates.io docs.rs GitHub branch checks state

A lovingly hand-crafted1 implementation of CSAF for Rust. Currently, based on the v2.0 editor draft. Should be considered strictly less-strict than the spec right now - valid CSAF should deserialize successfully, but invalid CSAF may also succeed and the library may generate invalid CSAF.

My current use case is for experimenting with the VEX profile.

1 - CSAF defines a JSON Schema schema using Draft 2020-12. schemafy exists for generating Rust code from JSON Schema, but supports an older draft which differs significantly from the 2020-12 draft.

Dependencies

~9–21MB
~318K SLoC