Metadata-Version: 2.5
Name: limbowatch
Version: 0.1.0a11
Summary: Track published security advisories stuck in limbo (not yet reviewed into the databases scanners read)
Project-URL: Homepage, https://limbo.watch
Project-URL: Source, https://github.com/limbowatch/limbowatch
Project-URL: Documentation, https://github.com/limbowatch/limbowatch/blob/main/docs/WATCHER.md
Project-URL: Issues, https://github.com/limbowatch/limbowatch/issues
Project-URL: Changelog, https://github.com/limbowatch/limbowatch/blob/main/CHANGELOG.md
Project-URL: Tracker, https://limbo.watch/tracker/
Author: Limbowatch contributors
License-Expression: Apache-2.0
Keywords: advisories,cyclonedx,dependencies,ghsa,osv,sarif,sca,security,supply-chain,vulnerabilities
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: Intended Audience :: Information Technology
Classifier: Intended Audience :: System Administrators
Classifier: Operating System :: MacOS
Classifier: Operating System :: POSIX :: Linux
Classifier: Programming Language :: Python :: 3 :: Only
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Programming Language :: Python :: 3.14
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Quality Assurance
Classifier: Typing :: Typed
Requires-Python: >=3.12
Requires-Dist: httpx>=0.27
Requires-Dist: pydantic>=2.14.2
Requires-Dist: sqlalchemy>=2.0
Requires-Dist: univers>=30
Description-Content-Type: text/markdown

# limbowatch

The library behind [Limbowatch](https://limbo.watch): it tracks security advisories **in limbo**, meaning published by maintainers on GitHub but not yet in GitHub's reviewed Advisory Database or OSV, so scanners that read those databases don't report them.

Most people want the command line instead: `pip install limbowatch-cli`. See the [watcher guide](https://github.com/limbowatch/limbowatch/blob/main/docs/WATCHER.md).

Advisory data: GitHub repository security advisories and the GitHub Advisory Database (CC BY 4.0), via the limbo feed (CC BY 4.0). Code: Apache-2.0.
