v3

type Advisory struct {

	// The identifier for the security advisory. Note that this may differ from
	// the identifier in the request, due to canonicalization.
	AdvisoryKey *AdvisoryKey `protobuf:"bytes,1,opt,name=advisory_key,json=advisoryKey,proto3" json:"advisory_key,omitempty"`
	// The URL of the security advisory.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// A brief human-readable description.
	Title string `protobuf:"bytes,3,opt,name=title,proto3" json:"title,omitempty"`
	// Other identifiers used for the advisory, including CVEs.
	Aliases []string `protobuf:"bytes,4,rep,name=aliases,proto3" json:"aliases,omitempty"`
	// The severity of the advisory as a CVSS v3 score in the range [0,10].
	// A higher score represents greater severity.
	Cvss3Score float32 `protobuf:"fixed32,5,opt,name=cvss3_score,json=cvss3Score,proto3" json:"cvss3_score,omitempty"`
	// The severity of the advisory as a CVSS v3 vector string.
	Cvss3Vector string `protobuf:"bytes,6,opt,name=cvss3_vector,json=cvss3Vector,proto3" json:"cvss3_vector,omitempty"`
	// contains filtered or unexported fields
}

type AdvisoryKey struct {

	// The OSV identifier for the security advisory.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type Dependencies struct {

	// The nodes of the dependency graph. The first node is the root of the graph.
	Nodes []*Dependencies_Node `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
	// The edges of the dependency graph.
	Edges []*Dependencies_Edge `protobuf:"bytes,2,rep,name=edges,proto3" json:"edges,omitempty"`
	// Any error associated with the dependency graph that is not specific to a
	// node. An error here may imply the graph as a whole is incorrect.
	// This error message has no defined format and is intended for human
	// consumption.
	Error string `protobuf:"bytes,3,opt,name=error,proto3" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type Dependencies_Edge struct {

	// The node declaring the dependency, specified as an index into the list of
	// nodes.
	FromNode uint32 `protobuf:"varint,1,opt,name=from_node,json=fromNode,proto3" json:"from_node,omitempty"`
	// The node resolving the dependency, specified as an index into the list of
	// nodes.
	ToNode uint32 `protobuf:"varint,2,opt,name=to_node,json=toNode,proto3" json:"to_node,omitempty"`
	// The requirement resolved by this edge, as declared by the "from" node.
	// The meaning of this field is system-specific. As an example, in npm, the
	// requirement "^1.0.0" may be resolved by the version "1.2.3".
	Requirement string `protobuf:"bytes,3,opt,name=requirement,proto3" json:"requirement,omitempty"`
	// contains filtered or unexported fields
}

type Dependencies_Node struct {

	// The package version represented by this node. Note that the package and
	// version name may differ from the names in the request, if provided, due
	// to canonicalization.
	//
	// In some systems, a graph may contain multiple nodes for the same package
	// version.
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// If true, this is a bundled dependency.
	//
	// For bundled dependencies, the package name in the version key encodes
	// how the dependency is bundled. As an example, a bundled dependency with
	// a name like "a>1.2.3>b>c" is part of the dependency graph of package "a"
	// at version "1.2.3", and has the local name "c". It may or may not be the
	// same as a package with the global name "c".
	Bundled bool `protobuf:"varint,2,opt,name=bundled,proto3" json:"bundled,omitempty"`
	// Whether this node represents a direct or indirect dependency within this
	// dependency graph. Note that it's possible for a dependency to be both
	// direct and indirect; if so, it is marked as direct.
	Relation DependencyRelation `protobuf:"varint,4,opt,name=relation,proto3,enum=deps_dev.v3.DependencyRelation" json:"relation,omitempty"`
	// Errors associated with this node of the graph, such as an unresolved
	// dependency requirement. An error on a node may imply the graph as a
	// whole is incorrect. These error messages have no defined format and are
	// intended for human consumption.
	Errors []string `protobuf:"bytes,3,rep,name=errors,proto3" json:"errors,omitempty"`
	// contains filtered or unexported fields
}

type DependencyRelation int32

type GetAdvisoryRequest struct {
	AdvisoryKey *AdvisoryKey `protobuf:"bytes,1,opt,name=advisory_key,json=advisoryKey,proto3" json:"advisory_key,omitempty"`
	// contains filtered or unexported fields
}

type GetDependenciesRequest struct {
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// contains filtered or unexported fields
}

type GetPackageRequest struct {
	PackageKey *PackageKey `protobuf:"bytes,1,opt,name=package_key,json=packageKey,proto3" json:"package_key,omitempty"`
	// contains filtered or unexported fields
}

type GetProjectPackageVersionsRequest struct {
	ProjectKey *ProjectKey `protobuf:"bytes,1,opt,name=project_key,json=projectKey,proto3" json:"project_key,omitempty"`
	// contains filtered or unexported fields
}

type GetProjectRequest struct {
	ProjectKey *ProjectKey `protobuf:"bytes,1,opt,name=project_key,json=projectKey,proto3" json:"project_key,omitempty"`
	// contains filtered or unexported fields
}

type GetRequirementsRequest struct {
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// contains filtered or unexported fields
}

type GetVersionRequest struct {
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// contains filtered or unexported fields
}

type Hash struct {

	// The function used to produce this hash.
	Type HashType `protobuf:"varint,1,opt,name=type,proto3,enum=deps_dev.v3.HashType" json:"type,omitempty"`
	// A hash value.
	Value []byte `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type HashType int32

type InsightsClient interface {
	// GetPackage returns information about a package, including a list of its
	// available versions, with the default version marked if known.
	GetPackage(ctx context.Context, in *GetPackageRequest, opts ...grpc.CallOption) (*Package, error)
	// GetVersion returns information about a specific package version, including
	// its licenses and any security advisories known to affect it.
	GetVersion(ctx context.Context, in *GetVersionRequest, opts ...grpc.CallOption) (*Version, error)
	// GetRequirements returns the requirements for a given version in a
	// system-specific format. Requirements are currently available for
	// Maven, npm and NuGet.
	//
	// Requirements are the dependency constraints specified by the version.
	GetRequirements(ctx context.Context, in *GetRequirementsRequest, opts ...grpc.CallOption) (*Requirements, error)
	// GetDependencies returns a resolved dependency graph for the given package
	// version. Dependencies are currently available for Go, npm, Cargo, Maven
	// and PyPI.
	//
	// Dependencies are the resolution of the requirements (dependency
	// constraints) specified by a version.
	//
	// The dependency graph should be similar to one produced by installing the
	// package version on a generic 64-bit Linux system, with no other
	// dependencies present. The precise meaning of this varies from system to
	// system.
	GetDependencies(ctx context.Context, in *GetDependenciesRequest, opts ...grpc.CallOption) (*Dependencies, error)
	// GetProject returns information about projects hosted by GitHub, GitLab, or
	// BitBucket, when known to us.
	GetProject(ctx context.Context, in *GetProjectRequest, opts ...grpc.CallOption) (*Project, error)
	// GetProjectPackageVersions returns known mappings between the requested
	// project and package versions.
	// At most 1500 package versions are returned. Mappings which were derived from
	// a [SLSA provenance attestation](https://slsa.dev/spec/v1.0/provenance)
	// are served first.
	GetProjectPackageVersions(ctx context.Context, in *GetProjectPackageVersionsRequest, opts ...grpc.CallOption) (*ProjectPackageVersions, error)
	// GetAdvisory returns information about security advisories hosted by OSV.
	GetAdvisory(ctx context.Context, in *GetAdvisoryRequest, opts ...grpc.CallOption) (*Advisory, error)
	// Query returns information about multiple package versions, which can be
	// specified by name, content hash, or both. If a hash was specified in the
	// request, it returns the artifacts that matched the hash.
	//
	// Querying by content hash is currently supported for npm, Cargo, Maven, and
	// NuGet. It is typical for hash queries to return many results; hashes are
	// matched against multiple release artifacts (such as JAR files) that
	// comprise package versions, and any given artifact may appear in several
	// package versions.
	Query(ctx context.Context, in *QueryRequest, opts ...grpc.CallOption) (*QueryResult, error)
}

type InsightsServer interface {
	// GetPackage returns information about a package, including a list of its
	// available versions, with the default version marked if known.
	GetPackage(context.Context, *GetPackageRequest) (*Package, error)
	// GetVersion returns information about a specific package version, including
	// its licenses and any security advisories known to affect it.
	GetVersion(context.Context, *GetVersionRequest) (*Version, error)
	// GetRequirements returns the requirements for a given version in a
	// system-specific format. Requirements are currently available for
	// Maven, npm and NuGet.
	//
	// Requirements are the dependency constraints specified by the version.
	GetRequirements(context.Context, *GetRequirementsRequest) (*Requirements, error)
	// GetDependencies returns a resolved dependency graph for the given package
	// version. Dependencies are currently available for Go, npm, Cargo, Maven
	// and PyPI.
	//
	// Dependencies are the resolution of the requirements (dependency
	// constraints) specified by a version.
	//
	// The dependency graph should be similar to one produced by installing the
	// package version on a generic 64-bit Linux system, with no other
	// dependencies present. The precise meaning of this varies from system to
	// system.
	GetDependencies(context.Context, *GetDependenciesRequest) (*Dependencies, error)
	// GetProject returns information about projects hosted by GitHub, GitLab, or
	// BitBucket, when known to us.
	GetProject(context.Context, *GetProjectRequest) (*Project, error)
	// GetProjectPackageVersions returns known mappings between the requested
	// project and package versions.
	// At most 1500 package versions are returned. Mappings which were derived from
	// a [SLSA provenance attestation](https://slsa.dev/spec/v1.0/provenance)
	// are served first.
	GetProjectPackageVersions(context.Context, *GetProjectPackageVersionsRequest) (*ProjectPackageVersions, error)
	// GetAdvisory returns information about security advisories hosted by OSV.
	GetAdvisory(context.Context, *GetAdvisoryRequest) (*Advisory, error)
	// Query returns information about multiple package versions, which can be
	// specified by name, content hash, or both. If a hash was specified in the
	// request, it returns the artifacts that matched the hash.
	//
	// Querying by content hash is currently supported for npm, Cargo, Maven, and
	// NuGet. It is typical for hash queries to return many results; hashes are
	// matched against multiple release artifacts (such as JAR files) that
	// comprise package versions, and any given artifact may appear in several
	// package versions.
	Query(context.Context, *QueryRequest) (*QueryResult, error)
	// contains filtered or unexported methods
}

type Link struct {

	// A label describing the resource that the link points to.
	Label string `protobuf:"bytes,1,opt,name=label,proto3" json:"label,omitempty"`
	// The URL of the link.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// contains filtered or unexported fields
}

type Package struct {

	// The name of the package. Note that it may differ from the name in the
	// request, due to canonicalization.
	PackageKey *PackageKey `protobuf:"bytes,1,opt,name=package_key,json=packageKey,proto3" json:"package_key,omitempty"`
	// The available versions of the package.
	Versions []*Package_Version `protobuf:"bytes,2,rep,name=versions,proto3" json:"versions,omitempty"`
	// contains filtered or unexported fields
}

type PackageKey struct {

	// The package management system containing the package.
	System System `protobuf:"varint,1,opt,name=system,proto3,enum=deps_dev.v3.System" json:"system,omitempty"`
	// The name of the package.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type Package_Version struct {

	// The name of the version. Note that the package name may differ from the
	// name in the request, due to canonicalization.
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// The time when this package version was published, if available, as
	// reported by the package management authority.
	PublishedAt *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=published_at,json=publishedAt,proto3" json:"published_at,omitempty"`
	// If true, this is the default version of the package: the version that is
	// installed when no version is specified. The precise meaning of this is
	// system-specific, but it is commonly the version with the greatest
	// version number, ignoring pre-release versions.
	IsDefault bool `protobuf:"varint,2,opt,name=is_default,json=isDefault,proto3" json:"is_default,omitempty"`
	// contains filtered or unexported fields
}

type Project struct {

	// The identifier for the project. Note that this may differ from the
	// identifier in the request, due to canonicalization.
	ProjectKey *ProjectKey `protobuf:"bytes,1,opt,name=project_key,json=projectKey,proto3" json:"project_key,omitempty"`
	// The number of open issues reported by the project host.
	// Only available for GitHub and GitLab.
	OpenIssuesCount int32 `protobuf:"varint,2,opt,name=open_issues_count,json=openIssuesCount,proto3" json:"open_issues_count,omitempty"`
	// The number of stars reported by the project host.
	// Only available for GitHub and GitLab.
	StarsCount int32 `protobuf:"varint,3,opt,name=stars_count,json=starsCount,proto3" json:"stars_count,omitempty"`
	// The number of forks reported by the project host.
	// Only available for GitHub and GitLab.
	ForksCount int32 `protobuf:"varint,4,opt,name=forks_count,json=forksCount,proto3" json:"forks_count,omitempty"`
	// The license reported by the project host.
	License string `protobuf:"bytes,5,opt,name=license,proto3" json:"license,omitempty"`
	// The description reported by the project host.
	Description string `protobuf:"bytes,6,opt,name=description,proto3" json:"description,omitempty"`
	// The homepage reported by the project host.
	Homepage string `protobuf:"bytes,7,opt,name=homepage,proto3" json:"homepage,omitempty"`
	// An [OpenSSF Scorecard](https://github.com/ossf/scorecard) for the project,
	// if one is available.
	Scorecard *Project_Scorecard `protobuf:"bytes,8,opt,name=scorecard,proto3" json:"scorecard,omitempty"`
	// Details of this project's testing by the
	// [OSS-Fuzz service](https://google.github.io/oss-fuzz/).
	// Only set if the project is tested by OSS-Fuzz.
	OssFuzz *Project_OSSFuzzDetails `protobuf:"bytes,9,opt,name=oss_fuzz,json=ossFuzz,proto3" json:"oss_fuzz,omitempty"`
	// contains filtered or unexported fields
}

type ProjectKey struct {

	// A project identifier of the form `github.com/user/repo`,
	// `gitlab.com/user/repo`, or `bitbucket.org/user/repo`.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// contains filtered or unexported fields
}

type ProjectPackageVersions struct {

	// The versions that were built from the source code contained in this
	// project.
	Versions []*ProjectPackageVersions_Version `protobuf:"bytes,1,rep,name=versions,proto3" json:"versions,omitempty"`
	// contains filtered or unexported fields
}

type ProjectPackageVersions_Version struct {

	// The identifier for the version.
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// The SLSA provenance statements that link the version to the project.
	SlsaProvenances []*SLSAProvenance `protobuf:"bytes,2,rep,name=slsa_provenances,json=slsaProvenances,proto3" json:"slsa_provenances,omitempty"`
	// What the relationship between the project and the package version is.
	RelationType ProjectRelationType `` /* 135-byte string literal not displayed */
	// How the mapping between project and package version was discovered.
	RelationProvenance ProjectRelationProvenance `` /* 159-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ProjectRelationProvenance int32

type ProjectRelationType int32

type Project_OSSFuzzDetails struct {

	// The total number of lines of code in the project.
	LineCount int32 `protobuf:"varint,1,opt,name=line_count,json=lineCount,proto3" json:"line_count,omitempty"`
	// The number of lines of code covered by fuzzing.
	LineCoverCount int32 `protobuf:"varint,2,opt,name=line_cover_count,json=lineCoverCount,proto3" json:"line_cover_count,omitempty"`
	// The date the fuzz test that produced the coverage information was run
	// against this project.
	// The time portion of this field is midnight UTC.
	Date *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=date,proto3" json:"date,omitempty"`
	// The URL containing the configuration for the project in the
	// OSS-Fuzz repository.
	ConfigUrl string `protobuf:"bytes,4,opt,name=config_url,json=configUrl,proto3" json:"config_url,omitempty"`
	// contains filtered or unexported fields
}

type Project_Scorecard struct {

	// The date at which the scorecard was produced.
	// The time portion of this field is midnight UTC.
	Date *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=date,proto3" json:"date,omitempty"`
	// The source code repository and commit the scorecard was produced from.
	Repository *Project_Scorecard_Repository `protobuf:"bytes,2,opt,name=repository,proto3" json:"repository,omitempty"`
	// The version and commit of the Scorecard program used to produce the
	// scorecard.
	Scorecard *Project_Scorecard_ScorecardDetails `protobuf:"bytes,3,opt,name=scorecard,proto3" json:"scorecard,omitempty"`
	// The results of the
	// [Scorecard Checks](https://github.com/ossf/scorecard#scorecard-checks)
	// performed on the project.
	Checks []*Project_Scorecard_Check `protobuf:"bytes,4,rep,name=checks,proto3" json:"checks,omitempty"`
	// A weighted average score in the range [0,10]. A higher score is better.
	OverallScore float32 `protobuf:"fixed32,5,opt,name=overall_score,json=overallScore,proto3" json:"overall_score,omitempty"`
	// Additional metadata associated with the scorecard.
	Metadata []string `protobuf:"bytes,6,rep,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type Project_Scorecard_Check struct {

	// The name of the check.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Human-readable documentation for the check.
	Documentation *Project_Scorecard_Check_Documentation `protobuf:"bytes,2,opt,name=documentation,proto3" json:"documentation,omitempty"`
	// A score in the range [0,10]. A higher score is better.
	// A negative score indicates that the check did not run successfully.
	Score int32 `protobuf:"varint,3,opt,name=score,proto3" json:"score,omitempty"`
	// The reason for the score.
	Reason string `protobuf:"bytes,4,opt,name=reason,proto3" json:"reason,omitempty"`
	// Further details regarding the check.
	Details []string `protobuf:"bytes,5,rep,name=details,proto3" json:"details,omitempty"`
	// contains filtered or unexported fields
}

type Project_Scorecard_Check_Documentation struct {

	// A short description of the check.
	ShortDescription string `protobuf:"bytes,1,opt,name=short_description,json=shortDescription,proto3" json:"short_description,omitempty"`
	// A link to more details about the check.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// contains filtered or unexported fields
}

type Project_Scorecard_Repository struct {

	// The source code repository the scorecard was produced from.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The source code commit the scorecard was produced from.
	Commit string `protobuf:"bytes,2,opt,name=commit,proto3" json:"commit,omitempty"`
	// contains filtered or unexported fields
}

type Project_Scorecard_ScorecardDetails struct {

	// The version of the Scorecard program used to produce the scorecard.
	Version string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	// The commit of the Scorecard program used to produce the scorecard.
	Commit string `protobuf:"bytes,2,opt,name=commit,proto3" json:"commit,omitempty"`
	// contains filtered or unexported fields
}

type QueryRequest struct {

	// A content hash for an artifact associated with a package version, such as a
	// JAR file. Currently supported for npm, Cargo, Maven, and NuGet. Note that
	// hashes and package versions have a many-to-many relationship.
	Hash *Hash `protobuf:"bytes,1,opt,name=hash,proto3" json:"hash,omitempty"`
	// The name of the package version.
	VersionKey *VersionKey `protobuf:"bytes,2,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// contains filtered or unexported fields
}

type QueryResult struct {

	// Results matching the query. At most 1000 results are returned.
	Results []*QueryResult_Result `protobuf:"bytes,1,rep,name=results,proto3" json:"results,omitempty"`
	// contains filtered or unexported fields
}

type QueryResult_Result struct {
	Version *Version `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

type Requirements struct {

	// The NuGet-specific representation of the version's requirements.
	//
	// Note that the term "dependency" is used here to mean "a single unresolved
	// requirement" to be consistent with how the term is used in the NuGet
	// ecosystem. This is different to how it is used elsewhere in the deps.dev
	// API.
	Nuget *Requirements_NuGet `protobuf:"bytes,1,opt,name=nuget,proto3" json:"nuget,omitempty"`
	// The npm-specific representation of the version's requirements.
	//
	// Note that the term "dependency" is used here to mean "a single unresolved
	// requirement" to be consistent with how the term is used in the npm
	// ecosystem. This is different to how it is used elsewhere in the deps.dev
	// API.
	Npm *Requirements_NPM `protobuf:"bytes,2,opt,name=npm,proto3" json:"npm,omitempty"`
	// The Maven-specific representation of the version's requirements.
	//
	// Note that the term "dependency" is used here to mean "a single unresolved
	// requirement" to be consistent with how the term is used in the Maven
	// ecosystem. This is different to how it is used elsewhere in the deps.dev
	// API.
	//
	// This data is as it is declared in a version POM file. The data in parent
	// POMs are not merged.
	// Any string field may contain references to properties, and the properties
	// are not interpolated.
	Maven *Requirements_Maven `protobuf:"bytes,3,opt,name=maven,proto3" json:"maven,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven struct {

	// The direct parent of a package version.
	Parent *VersionKey `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// The list of dependencies.
	Dependencies []*Requirements_Maven_Dependency `protobuf:"bytes,2,rep,name=dependencies,proto3" json:"dependencies,omitempty"`
	// The list of dependency management.
	// The format is the same as dependencies.
	DependencyManagement []*Requirements_Maven_Dependency `protobuf:"bytes,3,rep,name=dependency_management,json=dependencyManagement,proto3" json:"dependency_management,omitempty"`
	// The list of properties, used to resolve placeholders.
	Properties []*Requirements_Maven_Property `protobuf:"bytes,4,rep,name=properties,proto3" json:"properties,omitempty"`
	// The list of repositories.
	Repositories []*Requirements_Maven_Repository `protobuf:"bytes,5,rep,name=repositories,proto3" json:"repositories,omitempty"`
	// The list of profiles.
	Profiles []*Requirements_Maven_Profile `protobuf:"bytes,6,rep,name=profiles,proto3" json:"profiles,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Dependency struct {

	// The name of the package.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The version requirement of the dependency.
	Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
	// The classifier of the dependency, which distinguishes artifacts that
	// differ in content.
	Classifier string `protobuf:"bytes,3,opt,name=classifier,proto3" json:"classifier,omitempty"`
	// The type of the dependency, defaults to jar.
	Type string `protobuf:"bytes,4,opt,name=type,proto3" json:"type,omitempty"`
	// The scope of the dependency, specifies how to limit the transitivity
	// of a dependency.
	Scope string `protobuf:"bytes,5,opt,name=scope,proto3" json:"scope,omitempty"`
	// Whether the dependency is optional or not.
	Optional string `protobuf:"bytes,6,opt,name=optional,proto3" json:"optional,omitempty"`
	// The dependencies to be excluded, in the form of a list of package
	// names.
	// Exclusions may contain wildcards in both groupID and artifactID.
	Exclusions []string `protobuf:"bytes,7,rep,name=exclusions,proto3" json:"exclusions,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Profile struct {

	// The ID of the profile.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The activation requirement of the profile.
	Activation *Requirements_Maven_Profile_Activation `protobuf:"bytes,2,opt,name=activation,proto3" json:"activation,omitempty"`
	// The dependencies specified in the profile.
	Dependencies []*Requirements_Maven_Dependency `protobuf:"bytes,3,rep,name=dependencies,proto3" json:"dependencies,omitempty"`
	// The dependency management specified in the profile.
	DependencyManagement []*Requirements_Maven_Dependency `protobuf:"bytes,4,rep,name=dependency_management,json=dependencyManagement,proto3" json:"dependency_management,omitempty"`
	// The properties specified in the profile.
	Properties []*Requirements_Maven_Property `protobuf:"bytes,5,rep,name=properties,proto3" json:"properties,omitempty"`
	// The repositories specified in the profile.
	Repositories []*Requirements_Maven_Repository `protobuf:"bytes,6,rep,name=repositories,proto3" json:"repositories,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Profile_Activation struct {

	// Whether the profile is active by default.
	ActiveByDefault string `protobuf:"bytes,1,opt,name=active_by_default,json=activeByDefault,proto3" json:"active_by_default,omitempty"`
	// The JDK requirement of the activation.
	Jdk *Requirements_Maven_Profile_Activation_JDK `protobuf:"bytes,2,opt,name=jdk,proto3" json:"jdk,omitempty"`
	// The operating system requirement of the activation.
	Os *Requirements_Maven_Profile_Activation_OS `protobuf:"bytes,3,opt,name=os,proto3" json:"os,omitempty"`
	// The property requirement of the activation.
	Property *Requirements_Maven_Profile_Activation_Property `protobuf:"bytes,4,opt,name=property,proto3" json:"property,omitempty"`
	// The file requirement of the activation.
	File *Requirements_Maven_Profile_Activation_File `protobuf:"bytes,5,opt,name=file,proto3" json:"file,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Profile_Activation_File struct {

	// The name of the file that its existence activates the profile.
	Exists string `protobuf:"bytes,1,opt,name=exists,proto3" json:"exists,omitempty"`
	// The name of the file, activate the profile if the file is missing.
	Missing string `protobuf:"bytes,2,opt,name=missing,proto3" json:"missing,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Profile_Activation_JDK struct {

	// The JDK requirement to activate the profile.
	Jdk string `protobuf:"bytes,1,opt,name=jdk,proto3" json:"jdk,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Profile_Activation_OS struct {

	// The name of the operating system.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The family of the operating system.
	Family string `protobuf:"bytes,2,opt,name=family,proto3" json:"family,omitempty"`
	// The CPU architecture of the operating system,
	Arch string `protobuf:"bytes,3,opt,name=arch,proto3" json:"arch,omitempty"`
	// The version of the operating system.
	Version string `protobuf:"bytes,4,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Profile_Activation_Property struct {

	// The property requirement to activate the profile.
	// This can be a system property or CLI user property.
	Property *Requirements_Maven_Property `protobuf:"bytes,1,opt,name=property,proto3" json:"property,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Property struct {

	// The name of the property.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The value of the property.
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_Maven_Repository struct {

	// The ID of the repository.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// The URL of the repository.
	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
	// Whether the description of the repository follows a common layout.
	Layout string `protobuf:"bytes,3,opt,name=layout,proto3" json:"layout,omitempty"`
	// Whether the repository is enabled for release downloads.
	ReleasesEnabled string `protobuf:"bytes,4,opt,name=releases_enabled,json=releasesEnabled,proto3" json:"releases_enabled,omitempty"`
	// Whether the repository is enabled for snapshot downloads.
	SnapshotsEnabled string `protobuf:"bytes,5,opt,name=snapshots_enabled,json=snapshotsEnabled,proto3" json:"snapshots_enabled,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NPM struct {

	// The dependency-related fields declared in the requested package version's
	// package.json.
	Dependencies *Requirements_NPM_Dependencies `protobuf:"bytes,1,opt,name=dependencies,proto3" json:"dependencies,omitempty"`
	// Contents of any additional package.json files found inside the
	// "node_modules" folder of the version's tarball, including nested
	// "node_modules".
	Bundled []*Requirements_NPM_Bundle `protobuf:"bytes,2,rep,name=bundled,proto3" json:"bundled,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NPM_Bundle struct {

	// The path inside the tarball where this dependency was found.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// The name of the bundled package, as declared inside the bundled
	// package.json.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// The version of this package, as declared inside the bundled
	// package.json.
	Version string `protobuf:"bytes,3,opt,name=version,proto3" json:"version,omitempty"`
	// The dependency-related fields from the bundled package.json.
	Dependencies *Requirements_NPM_Dependencies `protobuf:"bytes,4,opt,name=dependencies,proto3" json:"dependencies,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NPM_Dependencies struct {

	// The "dependencies" field of a package.json, represented as a list of
	// name, requirement pairs.
	Dependencies []*Requirements_NPM_Dependencies_Dependency `protobuf:"bytes,1,rep,name=dependencies,proto3" json:"dependencies,omitempty"`
	// The "devDependencies" field of a package.json. The format is the
	// same as "dependencies".
	DevDependencies []*Requirements_NPM_Dependencies_Dependency `protobuf:"bytes,2,rep,name=dev_dependencies,json=devDependencies,proto3" json:"dev_dependencies,omitempty"`
	// The "optionalDependencies" field of a package.json. The format is
	// the same as "dependencies".
	OptionalDependencies []*Requirements_NPM_Dependencies_Dependency `protobuf:"bytes,3,rep,name=optional_dependencies,json=optionalDependencies,proto3" json:"optional_dependencies,omitempty"`
	// The "peerDependencies" field of a package.json. The format is the
	// same as "dependencies".
	PeerDependencies []*Requirements_NPM_Dependencies_Dependency `protobuf:"bytes,4,rep,name=peer_dependencies,json=peerDependencies,proto3" json:"peer_dependencies,omitempty"`
	// The "bundleDependencies" field of a package.json: a list of package
	// names. In the package.json this may also just be the boolean value
	// "true", in which case this field will contain the names of all the
	// dependencies from the "dependencies" field.
	BundleDependencies []string `protobuf:"bytes,5,rep,name=bundle_dependencies,json=bundleDependencies,proto3" json:"bundle_dependencies,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NPM_Dependencies_Dependency struct {

	// The name of the package, the key in the original object.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The requirement, the corresponding value from the original object.
	Requirement string `protobuf:"bytes,2,opt,name=requirement,proto3" json:"requirement,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NuGet struct {

	// The requirements grouped by target framework.
	DependencyGroups []*Requirements_NuGet_DependencyGroup `protobuf:"bytes,1,rep,name=dependency_groups,json=dependencyGroups,proto3" json:"dependency_groups,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NuGet_DependencyGroup struct {

	// The target framework that this dependency group is for.
	TargetFramework string `protobuf:"bytes,1,opt,name=target_framework,json=targetFramework,proto3" json:"target_framework,omitempty"`
	// The requirements belonging to this dependency group.
	Dependencies []*Requirements_NuGet_DependencyGroup_Dependency `protobuf:"bytes,2,rep,name=dependencies,proto3" json:"dependencies,omitempty"`
	// contains filtered or unexported fields
}

type Requirements_NuGet_DependencyGroup_Dependency struct {

	// The name of the package.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The requirement on the package.
	Requirement string `protobuf:"bytes,2,opt,name=requirement,proto3" json:"requirement,omitempty"`
	// contains filtered or unexported fields
}

type SLSAProvenance struct {

	// The source code repository used to build the version.
	SourceRepository string `protobuf:"bytes,1,opt,name=source_repository,json=sourceRepository,proto3" json:"source_repository,omitempty"`
	// The commit of the source code repository the version was built from.
	Commit string `protobuf:"bytes,2,opt,name=commit,proto3" json:"commit,omitempty"`
	// The URL of the provenance statement if there is one.
	Url string `protobuf:"bytes,3,opt,name=url,proto3" json:"url,omitempty"`
	// The Sigstore bundle containing this attestation was verified using the
	// [sigstore-go](https://github.com/sigstore/sigstore-go) library.
	Verified bool `protobuf:"varint,4,opt,name=verified,proto3" json:"verified,omitempty"`
	// contains filtered or unexported fields
}

type System int32

type UnimplementedInsightsServer struct {
}

type UnsafeInsightsServer interface {
	// contains filtered or unexported methods
}

type Version struct {

	// The name of the package version. Note that the package and version name
	// may differ from names specified in requests, if applicable, due to
	// canonicalization.
	VersionKey *VersionKey `protobuf:"bytes,1,opt,name=version_key,json=versionKey,proto3" json:"version_key,omitempty"`
	// The time when this package version was published, if available, as
	// reported by the package management authority.
	PublishedAt *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=published_at,json=publishedAt,proto3" json:"published_at,omitempty"`
	// If true, this is the default version of the package: the version that is
	// installed when no version is specified. The precise meaning of this is
	// system-specific, but it is commonly the version with the greatest version
	// number, ignoring pre-release versions.
	IsDefault bool `protobuf:"varint,2,opt,name=is_default,json=isDefault,proto3" json:"is_default,omitempty"`
	// The licenses governing the use of this package version.
	//
	// We identify licenses as
	// [SPDX 2.1](https://spdx.dev/spdx-specification-21-web-version/)
	// expressions. When there is no associated SPDX identifier, we identify a
	// license as "non-standard". When we are unable to obtain license
	// information, this field is empty. When more than one license is listed,
	// their relationship is unspecified.
	//
	// For Cargo, Maven, npm, NuGet, and PyPI, license information is read from
	// the package metadata. For Go, license information is determined using the
	// [licensecheck](https://github.com/google/licensecheck) package.
	//
	// License information is not intended to be legal advice, and you should
	// independently verify the license or terms of any software for your own
	// needs.
	Licenses []string `protobuf:"bytes,3,rep,name=licenses,proto3" json:"licenses,omitempty"`
	// Security advisories known to affect this package version directly. Further
	// information can be requested using the Advisory method.
	//
	// Note that this field does not include advisories that affect dependencies
	// of this package version.
	AdvisoryKeys []*AdvisoryKey `protobuf:"bytes,4,rep,name=advisory_keys,json=advisoryKeys,proto3" json:"advisory_keys,omitempty"`
	// Links declared by or derived from package version metadata, to external
	// web resources such as a homepage or source code repository. Note that
	// these links are not verified for correctness.
	Links []*Link `protobuf:"bytes,5,rep,name=links,proto3" json:"links,omitempty"`
	// SLSA provenances for this version if they are available.
	SlsaProvenances []*SLSAProvenance `protobuf:"bytes,7,rep,name=slsa_provenances,json=slsaProvenances,proto3" json:"slsa_provenances,omitempty"`
	// URLs for the package management registries this package version is
	// available from.
	// Only set for systems that use a central repository for package
	// distribution: Cargo, Maven, npm, NuGet, and PyPI.
	Registries []string `protobuf:"bytes,8,rep,name=registries,proto3" json:"registries,omitempty"`
	// Projects that are related to this package version.
	RelatedProjects []*Version_Project `protobuf:"bytes,10,rep,name=related_projects,json=relatedProjects,proto3" json:"related_projects,omitempty"`
	// contains filtered or unexported fields
}

type VersionKey struct {

	// The package management system containing the package.
	System System `protobuf:"varint,1,opt,name=system,proto3,enum=deps_dev.v3.System" json:"system,omitempty"`
	// The name of the package.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// The version of the package.
	Version string `protobuf:"bytes,3,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

type Version_Project struct {

	// The identifier for the project.
	ProjectKey *ProjectKey `protobuf:"bytes,1,opt,name=project_key,json=projectKey,proto3" json:"project_key,omitempty"`
	// How the mapping between project and package version was discovered.
	RelationProvenance ProjectRelationProvenance `` /* 159-byte string literal not displayed */
	// What the relationship between the project and the package version is.
	RelationType ProjectRelationType `` /* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}