{"id":37624190,"url":"https://github.com/cristianovisk/open_source_insights_api","last_synced_at":"2026-01-16T10:45:26.663Z","repository":{"id":175426361,"uuid":"642955387","full_name":"cristianovisk/open_source_insights_api","owner":"cristianovisk","description":"Library to consume project Open Source Insights Project from Google","archived":false,"fork":false,"pushed_at":"2024-08-24T00:17:45.000Z","size":93,"stargazers_count":14,"open_issues_count":4,"forks_count":2,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-08-26T12:15:26.205Z","etag":null,"topics":["deps-dev","insights-open-source","library","vulnerability-detection"],"latest_commit_sha":null,"homepage":"https://pypi.org/project/open-source-insights-api/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cristianovisk.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-05-19T18:27:12.000Z","updated_at":"2025-01-13T02:41:31.000Z","dependencies_parsed_at":"2024-08-24T01:28:28.712Z","dependency_job_id":"6b7fa83c-e645-4668-af79-f940160ff8db","html_url":"https://github.com/cristianovisk/open_source_insights_api","commit_stats":null,"previous_names":["cristianovisk/open_source_insights_api"],"tags_count":11,"template":false,"template_full_name":null,"purl":"pkg:github/cristianovisk/open_source_insights_api","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cristianovisk%2Fopen_source_insights_api","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cristianovisk%2Fopen_source_insights_api/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cristianovisk%2Fopen_source_insights_api/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cristianovisk%2Fopen_source_insights_api/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cristianovisk","download_url":"https://codeload.github.com/cristianovisk/open_source_insights_api/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cristianovisk%2Fopen_source_insights_api/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28478054,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T06:30:42.265Z","status":"ssl_error","status_checked_at":"2026-01-16T06:30:16.248Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["deps-dev","insights-open-source","library","vulnerability-detection"],"created_at":"2026-01-16T10:45:26.581Z","updated_at":"2026-01-16T10:45:26.645Z","avatar_url":"https://github.com/cristianovisk.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"![GitHub top language](https://img.shields.io/github/languages/top/cristianovisk/open_source_insights_api)\r\n![PyPI - Python Version](https://img.shields.io/pypi/pyversions/open-source-insights-api)\r\n![PyPI - Version](https://img.shields.io/pypi/v/open-source-insights-api)\r\n![PyPI - Wheel](https://img.shields.io/pypi/wheel/open-source-insights-api)\r\n[![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/cristianovisk/open_source_insights_api/badge)](https://securityscorecards.dev/viewer/?uri=github.com/cristianovisk/open_source_insights_api)\r\n[![OpenSSF Best Practices](https://www.bestpractices.dev/projects/7882/badge)](https://www.bestpractices.dev/projects/7882)\r\n![GitHub commit activity (branch)](https://img.shields.io/github/commit-activity/y/cristianovisk/open_source_insights_api)\r\n![GitHub Release Date - Published_At](https://img.shields.io/github/release-date/cristianovisk/open_source_insights_api)\r\n![GitHub watchers](https://img.shields.io/github/watchers/cristianovisk/open_source_insights_api)\r\n![GitHub User's stars](https://img.shields.io/github/stars/cristianovisk)\r\n![CodeQL](https://github.com/cristianovisk/open_source_insights_api/workflows/CodeQL/badge.svg?branch=main)\r\n\r\n![Logo](https://deps.dev/static/img/insights-logo-full-dark.efe5263f.svg)\r\n# Open Source Insights Consume API\r\n\r\nThis library will consume data from project Google Open Source Insights. \r\n\r\nMore information in [deps.dev](https://deps.dev \"Website official Open Source Insights\").\r\n\r\n```shell\r\npip install open-source-insights-api\r\n```\r\nExample use CLI:\r\n```shell\r\nuser@shell$ sbom_insights --help\r\nusage: sbom_insights [-h] [-f [FILE]]\r\n\r\nSBOM Insights\r\n\r\noptions:\r\n  -h, --help            show this help message and exit\r\n  -f [FILE], --file [FILE]\r\n                        Define sbom.json to consume e return insights. (Default is sbom.json)\r\n```\r\n```shell\r\nuser@shell$ sbom_insights --file /opt/project/sbom.json\r\n                                     SBOM Insights\r\n┏━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━┳━━━━━━━━━━━┳━━━━━━━━━━━━━━━━┳━━━━━━━━━━━━┳━━━━━━━━━━━━━━┓\r\n┃ Package        ┃ Repository ┃ Version   ┃ Latest Version ┃ Dep Direct ┃ Dep Indirect ┃\r\n┡━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━╇━━━━━━━━━━━╇━━━━━━━━━━━━━━━━╇━━━━━━━━━━━━╇━━━━━━━━━━━━━━┩\r\n│ anyio          │ pypi       │ 4.0.0     │ 4.0.0          │ 3          │ 0            │\r\n│ certifi        │ pypi       │ 2023.7.22 │ 2023.7.22      │ 0          │ 0            │\r\n│ exceptiongroup │ pypi       │ 1.1.3     │ 1.1.3          │ 0          │ 0            │\r\n│ h11            │ pypi       │ 0.14.0    │ 0.14.0         │ 0          │ 0            │\r\n│ httpcore       │ pypi       │ 0.18.0    │ 0.18.0         │ 4          │ 2            │\r\n│ httpx          │ pypi       │ 0.25.0    │ 0.25.0         │ 4          │ 3            │\r\n│ idna           │ pypi       │ 3.4       │ 3.4.0          │ 0          │ 0            │\r\n│ markdown-it-py │ pypi       │ 3.0.0     │ 3.0.0          │ 1          │ 0            │\r\n│ mdurl          │ pypi       │ 0.1.2     │ 0.1.2          │ 0          │ 0            │\r\n│ pygments       │ pypi       │ 2.15.1    │ 2.16.1         │ 0          │ 0            │\r\n│ rich           │ pypi       │ 13.4.2    │ 13.5.3         │ 2          │ 1            │\r\n│ sniffio        │ pypi       │ 1.3.0     │ 1.3.0          │ 0          │ 0            │\r\n└────────────────┴────────────┴───────────┴────────────────┴────────────┴──────────────┘\r\n```\r\n\r\nExample use in code:\r\n\r\n```python\r\nfrom open_source_insights_api import os_insights\r\n\r\nosi = os_insights.query()\r\n\r\n#Will return all vulnerabilities in GHSA\r\nvulns = osi.GetAdvisory('ghsa-xxxx-xxxx-xxxx') # ID vulnerability GHSA\r\n\r\n#Will return all dependencies the package\r\ndeps = osi.GetDependencies('pypi', 'requests', '2.30.0') # Repository, Package, Version\r\n\r\n#Will return simple info about the package\r\npkg = osi.GetPackage('pypi', 'requests') # Repository, Package\r\n\r\n#Will return OpenSSF Scorecard and other info about repository in GitHub GitLab or BitBucket\r\nproject = osi.GetProject('github.com/owner/pkg')\r\n\r\n#Will return all dependencies required to the package run\r\nreq = osi.GetRequirements('pypi', 'requests', '2.30.0')\r\n\r\n#Will return information about especific version\r\nversion = osi.GetRequirements('pypi', 'requests', '2.30.0')\r\n\r\n#Will search package in database of deps.dev\r\n#Way one\r\nresult = osi.Search(system_repo=\"pypi\", pkg_name=\"requests\", pkg_version=\"2.30.0\")\r\n#Way two\r\nresult = osi.Search(hash_type=\"sha256\", hash_value=\"57678e48b28e1be96ac260ad265ba84ace59cc5e098f65e28263363fa5f724c4\")\r\n\r\n\r\n\r\n```\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcristianovisk%2Fopen_source_insights_api","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcristianovisk%2Fopen_source_insights_api","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcristianovisk%2Fopen_source_insights_api/lists"}