AbsoluteJS

@absolutejs/vulnerabilities-ubuntu

@absolutejs/vulnerabilities-ubuntuv0.1.5betaPlatform & Infra

Canonical Ubuntu OSV advisory ingestion for AbsoluteJS vulnerability management.

#Installation

BASH
bun add @absolutejs/vulnerabilities-ubuntu

#Capabilities

Overview

Canonical Ubuntu OSV intelligence for @absolutejs/vulnerabilities. The adapter queries exact Ubuntu ecosystems, source package names, and full Debian package versions through the official central OSV API. It preserves Canonical vendor severity, upstream CVE aliases, distro revisions, affected ranges, and links each normalized record back to Canonical's official OSV repository.

The ecosystem and full distribution version are never reduced to generic SemVer. That prevents upstream-only comparisons from incorrectly flagging Canonical security backports as vulnerable.

Outcomes

What you can build

Build on the supported package contract

Use @absolutejs/vulnerabilities-ubuntu through its supported public entry points.

Hardening checklist

Production guidance

Make every external boundary explicitPin the deployed @absolutejs/vulnerabilities-ubuntu version, replace example or memory-backed dependencies with durable implementations, bound external calls, protect credentials, and emit enough evidence to retry or recover safely.

Follow in order

Troubleshooting path

1
Trace from the first failed boundary
Reproduce the smallest canonical @absolutejs/vulnerabilities-ubuntu example, confirm the supported entry point and version in the API explorer, then inspect the first boundary that did not produce its documented result.

#@absolutejs/vulnerabilities-ubuntu quick start

Partial snippet

# @absolutejs/vulnerabilities-ubuntu

TS
import { createUbuntuAdapter } from "@absolutejs/vulnerabilities-ubuntu";

const adapter = createUbuntuAdapter({
  components: [
    {
      ecosystem: "Ubuntu:24.04:LTS",
      name: "nginx",
      version: "1.24.0-2ubuntu7.5",
    },
  ],
});

#Public entry points

Supported entry points declared by this package manifest.

Package entry point declared in package.json.

@absolutejs/vulnerabilities-ubuntu@absolutejs/vulnerabilities-ubuntu/manifest@absolutejs/vulnerabilities-ubuntu/manifest.json

#Package commands

Scripts declared by this package manifest.

bun run buildrm -rf dist && bun build src/index.ts src/manifest.ts --outdir dist --target=bun --external @absolutejs/manifest --external @absolutejs/vulnerabilities --external '@absolutejs/vulnerabilities/*' --external @absolutejs/vulnerabilities-osv --external '@absolutejs/vulnerabilities-osv/*' --external @sinclair/typebox && tsc -p tsconfig.build.json && absolute-manifest emit
bun run check:packagebun run format && bun run typecheck && bun run test && bun run verify-package && bun run build && bun run verify-package --artifacts
bun run formatprettier --write "./**/*.{ts,json,md}"
bun run testbun test
bun run typechecktsc --noEmit

#API reference

Search the declarations exported by the current package type files. Expand a symbol to inspect its source-backed signature.

6 symbols
UBUNTU_OSV_URLvaluePermalinkSource
TS
const UBUNTU_OSV_URL = "https://security-metadata.canonical.com/osv/";
Exported from @absolutejs/vulnerabilities-ubuntu