{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/nexB/federatedcode/main/schemas/vulnerability.schema.json",
  "title": "Vulnerability",
  "type": "object",
  "$defs": {
    "Repository": {
      "description": "A git repository used as a backing storage for Package and vulnerability data",
      "properties": {
        "id": {
          "anyOf": [
            {
              "format": "uuid",
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "description": "The object's unique global identifier",
          "title": "Id"
        },
        "url": {
          "description": "Git Repository url ex: https://github.com/nexB/vulnerablecode-data",
          "title": "Url",
          "type": "string"
        },
        "path": {
          "description": "path of the repository",
          "maxLength": 200,
          "title": "Path",
          "type": "string"
        },
        "remote_url": {
          "anyOf": [
            {
              "maxLength": 300,
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "default": null,
          "description": "the url of the repository if this repository is remote",
          "title": "Remote Url"
        },
        "last_imported_commit": {
          "anyOf": [
            {
              "maxLength": 64,
              "type": "string"
            },
            {
              "type": "null"
            }
          ],
          "default": null,
          "title": "Last Imported Commit"
        },
        "created_at": {
          "description": "A field to track when repository are created",
          "format": "date-time",
          "title": "Created At",
          "type": "string"
        },
        "updated_at": {
          "description": "A field to track when repository are updated",
          "format": "date-time",
          "title": "Updated At",
          "type": "string"
        }
      },
      "required": [
        "url",
        "path",
        "created_at",
        "updated_at"
      ],
      "title": "Repository",
      "type": "object"
    }
  },
  "properties": {
    "repo": {
      "$ref": "#/$defs/Repository"
    },
    "id": {
      "anyOf": [
        {
          "maxLength": 20,
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "description": "Unique identifier for a vulnerability in the external representation. It is prefixed with VCID-",
      "title": "Id"
    },
    "remote_url": {
      "anyOf": [
        {
          "maxLength": 300,
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Remote Url"
    }
  },
  "required": [
    "repo"
  ]
}