Package

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/checkmarx/main/json-schema/checkmarx-package-schema.json",
  "title": "Package",
  "x-generated": "2026-10-04",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/checkmarx-risk-reports-api-openapi.yml#/components/schemas/Package",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Package identifier"
    },
    "name": {
      "type": "string",
      "description": "Package name"
    },
    "version": {
      "type": "string",
      "description": "Package version"
    },
    "packageRepository": {
      "type": "string",
      "description": "Package ecosystem (npm, maven, etc.)"
    },
    "isDirectDependency": {
      "type": "boolean",
      "description": "Whether this is a direct dependency"
    },
    "licenses": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "License names"
    },
    "highVulnerabilityCount": {
      "type": "integer",
      "description": "Number of high severity vulnerabilities"
    },
    "mediumVulnerabilityCount": {
      "type": "integer",
      "description": "Number of medium severity vulnerabilities"
    },
    "lowVulnerabilityCount": {
      "type": "integer",
      "description": "Number of low severity vulnerabilities"
    },
    "riskScore": {
      "type": "number",
      "format": "float",
      "description": "Package risk score"
    },
    "outdated": {
      "type": "boolean",
      "description": "Whether the package is outdated"
    },
    "newestVersion": {
      "type": "string",
      "description": "Newest available version"
    }
  }
}