{
 "schema_version": 1,
 "generated": "2026-10-20",
 "id": "only-cli-oc--check-advisories-for-dependency",
 "repo": "only-cli/oc",
 "repo_url": "https://github.com/only-cli/oc",
 "repo_slug": "only-cli-oc",
 "title": "Look up security advisories for a dependency",
 "page_title": "How to look up security advisories for a dependency with Oc",
 "summary": "Query the OSV database for a GHSA, CVE, or ecosystem id and read a compact result.",
 "who": "A security-minded developer or agent reviewing a dependency alert before upgrading.",
 "problem": "Advisory pages are long and mix in navigation, which wastes tokens when only the affected versions and fix matter.",
 "outcome": "A compact view of the advisory record for a known id, ready to paste into a triage note.",
 "steps": [
  "Run `npm install -g @only-cli/oc`",
  "Run `oc osv vuln <id>` with a GHSA or CVE id from your alert (inferred, check the README)",
  "Run `oc raw` if you need the full record"
 ],
 "agent_prompt": "Use the only-cli/oc repo: run `oc osv vuln <advisory-id>` with the id from the dependency alert. Expect a compact advisory view with the affected package and versions. Verify the id in the output matches the alert before acting on it.",
 "agents": [
  "claude-code",
  "codex",
  "cursor"
 ],
 "difficulty": "Intermediate",
 "time": "15 minutes",
 "basis": "readme",
 "caveat": "The README does not show the exact output layout of the OSV shortcut, so confirm the fields you need with Oc raw on the first run.",
 "category": "Research",
 "tags": [
  "Research"
 ],
 "lang": "javascript",
 "requirements": [
  "Node.js 20 or newer and npm",
  "A terminal the agent or you can run commands in",
  "Permission to install an npm package globally, or use npx instead"
 ],
 "risk": "dual-use",
 "seen_in_the_wild": false,
 "mentioned_publicly": false,
 "risks": [],
 "best": false,
 "score": 0.8,
 "evidence": [],
 "url": "https://dedupedai.com/use-cases/only-cli-oc/check-advisories-for-dependency/",
 "md": "https://dedupedai.com/use-cases/only-cli-oc/check-advisories-for-dependency/index.md",
 "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.",
 "api": "https://dedupedai.com/api/v1/usecases/only-cli-oc--check-advisories-for-dependency.json",
 "api_version": "v1"
}