v1

latestOpenAPI 3.1.0MIT2026-07-1718648.2 KB

commits

developers

/api/commits/{sha}/developer

Author of the given commit

get/api/commits/{sha}/developer

Path parameters

shastring Git SHA-256 required

Example:011a54315e46acdf288003566b8570440f5ac985

The unique SHA hash string of a git commit

Response

idinteger

Internal primary key. Subject to change.

emailstring

nicknamestring

Obfuscated developer email address.

In VHP, we avoid using developer names and email addresses. We don't want to assign blame to the developers publicly; instead, we deterministically assign an animal name to their email address.

Our algorithm for assigning nicknames is relatively straightforward and can be found here: https://github.com/VulnerabilityHistoryProject/vulnerability-history/tree/master/lib/nicknames

Essentially, we compute the SHA-256 hash of the email address. The first half of the SHA is modded by the length of 902 common names to get the name. The second half of the SHA is modded by a length of 500 animal names. With 902x500 combinations, this makes 451,000 possible combinations of animals.

notesNotesObject

A freeform document (i.e. JSON) of any extra information we have on this record. Sometimes we don't have an exact place in our schema to place things, so we err on the side of retaining records and record them here.

Importantly, the schema of this object is subject to change. We try to keep it consistent, but all curators have a mind of their own.