Dataset sample

Package Supply Chain Risk CSV Sample

A sample for a possible open-source package risk and dependency-change feed built from public advisory, package metadata, and open-source insight APIs. It is data infrastructure only, not a legal, license, or exploitability decision engine.

Download CSV sample Request this dataset View current demo

CSV /datasets/package-risk-sample.csv

observed_at,ecosystem,package_name,version,event_type,advisory_id,risk_flag,source
2026-07-02T14:15:00Z,npm,sample-package,1.4.2,new_advisory,OSV-2026-0001,vulnerability,OSV
2026-07-02T13:30:00Z,pypi,sample-framework,3.2.1,license_changed,,license_review,deps.dev
2026-07-01T18:45:00Z,maven,com.example:sample-lib,2.0.0,dependency_changed,,dependency_review,deps.dev

CSV Schema

The fields are intentionally simple so buyers can inspect the shape in spreadsheets, BI tools, and lightweight data pipelines.

observed_at
ecosystem
package_name
version
event_type
advisory_id
risk_flag
source

Access Model

This sample helps buyers compare dataset, report-style, and API delivery options.

API subscription for package/advisory watchlists and release polling.
CSV or SBOM-enrichment feed for teams that start with spreadsheet review.
Launch sequencing follows qualified requests, sample downloads, and developer-fit inquiries.

Public Sources

Public records can be normalized into stable datasets and API endpoints when a buyer needs larger coverage or recurring delivery.

OSV vulnerability API
deps.dev Open Source Insights API
GitHub Security Advisory data
Public package registries