Additional options for references field to support reproducers/exploit code about osv-schema HOT 3 CLOSED

The description for "EVIDENCE" seems to fit this particular use case perfectly. CC @joshbuker who added it (and who opened #50 for discussion which seems similar).

In terms of a more fine grained way to annotate these, I think we should think more about the intended use case. The intended use case of these broader reference categories was to provide a machine readable mechanism for frontends/UI to roughly group links and for humans to quickly filter out things they don't care about.

If we try to make these more fine grained, what's the end use case for a consumer? Why is REPRODUCER vs EXPLOIT important to distinguish in the schema itself? What do we gain vs having someone just open the link?

from osv-schema.

Can we also add:

DETECTION (e.g. https://github.com/VNCERT-CC/0dayex-checker)
DISCUSSION (e.g. the reddit/twitter threads on this, they're not an article/web/evidence/etc)

from osv-schema.

+1 on DETECTION and DISCUSSION.

I think they add enough value to end users and are distinct enough from other types to be worth including.

from osv-schema.