OSV-Scanner provides an officially supported frontend to the OSV database that connects a project’s list of dependencies with the vulnerabilities that affect them. The OSV format unambiguously stores information about affected versions in a machine-readable format that precisely maps onto a developer's list of packages.