pkg/

Package semver provides a CEL-runtime plugin that exposes a `semver` object with helpers for parsing and comparing Semantic Versioning 2.0.0 strings.

Package vex is a transformer that reads in a vulnerability report and a number of VEX documents and suppresses those that do not affect the subject