audit: Remove VuXML from audit and add OSV code

Makefile.in

@@ -65,7 +65,6 @@ COCCI_ARGS=	-I ${top_srcdir} \
 		-I ${top_srcdir}/compat \
 		-I ${top_srcdir}/libpkg \
 		-I ${top_srcdir}/src \
-		-I ${top_srcdir}/external/yxml \
 		-I ${top_srcdir}/external/libucl/include \
 		-I ${top_srcdir}/external/uthash \
 		-I ${top_srcdir}/external/sqlite  \

configure.def

@@ -385,7 +385,7 @@ for _dir in external/libblake2 external/libpicosat \
 	external/liblinenoise external/libsqlite external/libfetch \
 	external compat libpkg libpkg/repo libpkg/repo/binary src \
 	external/libucl external/libelf tests docs \
-	external/liblua external/libyxml scripts external/libder \
+	external/liblua scripts external/libder \
 	external/libecc; do
 	make_template "$_dir/Makefile.in"
 	define_append CONF_GEN_FILES "$_dir/Makefile.in"

docs/pkg-install.8

@@ -97,7 +97,7 @@ setting in
 .Pa pkg.conf .
 .Pp
 If the vulnerability database
-.Pa ( vuln.xml )
+.Pa ( freebsd-osv.json )
 is available
 .Pq see Xr pkg-audit 8 ,
 the summary will flag any packages with known vulnerabilities and

docs/pkg-upgrade.8

@@ -92,7 +92,7 @@ setting in
 .Pa pkg.conf .
 .Pp
 If the vulnerability database
-.Pa ( vuln.xml )
+.Pa ( freebsd-osv.json )
 is available
 .Pq see Xr pkg-audit 8 ,
 the summary will flag any packages with known vulnerabilities and

docs/pkg.conf.5

@@ -419,10 +419,16 @@ configuration file.
 Default: pkg+http, pkg+https, https, http, file, ssh, tcp.
 .It Cm VULNXML_SITE: string
 Specifies the URL to fetch the
-.Pa vuln.xml
+.Pa freebsd-osv.json
 vulnerability database from.
 Default:
-.Pa https://vuxml.freebsd.org/freebsd/vuln.xml.xz .
+.Pa https://raw.githubusercontent.com/illuusio/freebsd-osv/refs/heads/main/db/freebsd-osv.json .
+.It Cm VULNXML_SITE: string
+Specifies the URL to fetch the
+.Pa freebsd-osv.json
+vulnerability database from.
+Default:
+.Pa https://raw.githubusercontent.com/illuusio/freebsd-osv/refs/heads/main/db/freebsd-osv.json .
 .It Cm WARN_SIZE_LIMIT: integer
 When download and total change is less than than this option, don't ask
 the user to confirm the desired action.

external/Makefile.in

@@ -1,5 +1,5 @@
 include @builddir@/mk/defs.mk
-DIRS=	libblake2 libpicosat liblinenoise libfetch libsqlite libucl liblua libyxml libder libecc
+DIRS=	libblake2 libpicosat liblinenoise libfetch libsqlite libucl liblua libder libecc
 @if libelf-internal
 DIRS+=	libelf
 @endif