更新: 114 个文件 - 2026-03-19 16:45:07

08-threat-intel/source-map.yaml

@@ -828,6 +828,9 @@ systems:
         advisory_mode: core
         keywords: [medusa]
         max_items: 50
+        status: retired
+        retired_reason: OSV Medusa is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Medusa]
       - name: OSV Medusa
         kind: osv-batch
         confidence: official
@@ -858,6 +861,9 @@ systems:
         advisory_mode: core
         keywords: [react]
         max_items: 50
+        status: retired
+        retired_reason: OSV React is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV React]
       - name: GHSA React
         kind: ghsa-global
         ecosystem: npm
@@ -899,6 +905,9 @@ systems:
         advisory_mode: core
         keywords: [next.js, next]
         max_items: 50
+        status: retired
+        retired_reason: OSV Next.js is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Next.js]
       - name: GHSA Next.js
         kind: ghsa-global
         ecosystem: npm
@@ -938,6 +947,9 @@ systems:
         advisory_mode: core
         keywords: [vue]
         max_items: 50
+        status: retired
+        retired_reason: OSV Vue is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Vue]
       - name: GHSA Vue
         kind: ghsa-global
         ecosystem: npm
@@ -979,6 +991,9 @@ systems:
         advisory_mode: core
         keywords: [nuxt]
         max_items: 50
+        status: retired
+        retired_reason: OSV Nuxt is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Nuxt]
       - name: GHSA Nuxt
         kind: ghsa-global
         ecosystem: npm
@@ -1018,6 +1033,9 @@ systems:
         advisory_mode: core
         keywords: [vite]
         max_items: 50
+        status: retired
+        retired_reason: OSV Vite is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Vite]
       - name: GHSA Vite
         kind: ghsa-global
         ecosystem: npm
@@ -2024,6 +2042,9 @@ systems:
         advisory_mode: server
         keywords: [caddy]
         max_items: 50
+        status: retired
+        retired_reason: OSV Caddy is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Caddy]
       - name: OSV Caddy
         kind: osv-batch
         confidence: official
@@ -2054,6 +2075,9 @@ systems:
         advisory_mode: server
         keywords: [traefik]
         max_items: 50
+        status: retired
+        retired_reason: OSV Traefik is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Traefik]
       - name: OSV Traefik
         kind: osv-batch
         confidence: official
@@ -2198,6 +2222,9 @@ systems:
         advisory_mode: core
         keywords: [gitea]
         max_items: 50
+        status: retired
+        retired_reason: OSV Gitea is the active official machine-readable replacement; keeping GitHub HTML advisories active adds duplicate cold-start cost.
+        replacement_sources: [OSV Gitea]
       - name: OSV Gitea
         kind: osv-batch
         confidence: official