Add OSV
A small explicit HTTP API for vulnerability lookups by package, purl, commit, or batch query.
Start here: OSV is public, no-auth, and shows the capability surface without OAuth friction.
osvinspectsearch_toolsget_toolcall_tool OSV is public and does not need auth; check Node 24+ and caplets setup.
-
caplets setup -
caplets install spiritledsoftware/caplets osv -
codex "try using the osv caplet"