> ## Documentation Index
> Fetch the complete documentation index at: https://docs.scanoss.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Versions in range, batch



## OpenAPI

````yaml /api-reference/developer-tools/v3-openapi.yaml post /v3/cryptography/algorithms/versions/range
openapi: 3.0.3
info:
  title: SCANOSS Services API
  version: 0.28.1
  description: |
    Consolidated HTTP API for the SCANOSS knowledge base. Exposes the
    following domains under a single `/v3/*` prefix:

      * **licenses**      — attribution files + per-file license evidence
      * **copyright**     — copyright evidence + holders (stubbed pending data)
      * **components**    — free-form search, versions and lifecycle status
      * **crypto**        — algorithms, hints and version ranges per purl,
                            plus ruleset tarball downloads
      * **crypto reachability** — stitched cryptographic findings, call
                            chains, entry points, supporting and forward
                            calls per component or frozen dependency tree
      * **dependencies**  — declared dependencies (with composite-license
                            resolution) and bounded transitive walks
      * **geo**           — contributor declared/curated locations and
                            timezone-based origin distribution
      * **vulnerabilities** (path `/vuln/*`) — CVE detection by merging the
                            local NVD KB with osv.dev, enriched with EPSS
      * **scan**          — direct SCANOSS engine scans (WFP upload, MD5 /
                            urlhash / snippet lookups)
      * **contents**      — raw notice / source-code content from the mz store

    Every batch endpoint encodes per-item failures as `info_code` /
    `info_message` so the call as a whole returns 200 with a
    `status.status` ∈ {SUCCESS, PARTIAL_SUCCESS, ERROR}. Single-purl
    GETs derive the same status from the item's `info_code`.
servers:
  - url: https://api.scanoss.com
    description: Production
security: []
tags:
  - name: licenses
    description: License attribution files and per-file license evidence
  - name: copyright
    description: Copyright evidence and holders (stubbed pending KB data)
  - name: components
    description: Component search, versions and lifecycle status
  - name: cryptography
    description: Cryptographic algorithms, hints, version ranges and ruleset downloads
  - name: cryptography-reachability
    description: >
      Crypto reachability over mining results: stitched findings, call chains,
      crypto entry points, supporting calls and bounded forward calls, for one
      component (with its mined dependency closure) or a caller-supplied frozen
      dependency tree. Registered only when reachability_db.dsn is configured.
  - name: dependencies
    description: Declared dependencies (per component) and transitive walks
  - name: geoprovenance
    description: Contributor locations (declared + curated) and origin distribution
  - name: vulnerabilities
    description: CVE detection (local KB + OSV) and CPE lookup
  - name: scan
    description: >
      Direct SCANOSS engine scans (passthrough), plus MD5 / urlhash / snippet
      lookups, and the dual-mode batch endpoint (synchronous single-shot WFP and
      chunked-async upload over the batchScanner pipeline). Registered only when
      scan.engine_path is configured.
  - name: contents
    description: Raw notice / source-code content from the mz store
paths:
  /v3/cryptography/algorithms/versions/range:
    post:
      tags:
        - cryptography
      summary: Versions in range, batch
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BatchRequest'
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CryptoVersionsInRangeResponse'
components:
  schemas:
    BatchRequest:
      type: object
      required:
        - components
      properties:
        components:
          type: array
          minItems: 1
          items:
            $ref: '#/components/schemas/Request'
        search:
          $ref: '#/components/schemas/SearchCriteria'
    CryptoVersionsInRangeResponse:
      type: object
      required:
        - components
        - status
      properties:
        components:
          type: array
          items:
            $ref: '#/components/schemas/ComponentVersionsInRange'
        status:
          $ref: '#/components/schemas/BatchStatus'
    Request:
      type: object
      required:
        - purl
      properties:
        purl:
          type: string
          description: Package URL
          example: pkg:github/scanoss/engine
        requirement:
          type: string
          description: Optional version requirement
          example: v5.4.5
    SearchCriteria:
      type: object
      description: |
        Optional request-level search configuration applied to every component
        in the batch (for GET endpoints the same knobs are query params). All
        fields are optional; the defaults disable every fallback (strict version
        matching, no related results). Honored by endpoints that support search
        criteria — currently `/v3/license/evidence`.
      properties:
        max_results_per_purl:
          type: integer
          minimum: 0
          description: Caps the per-purl result array in the output. 0 = no limit.
        show_related_results:
          type: boolean
          default: false
          description: Enable the source-purl fallback lookup.
        show_url:
          type: boolean
          default: false
          description: Include a `url` in each result (placeholder — data source TBD).
        on_version_not_found:
          type: string
          default: strict
          enum:
            - strict
            - show_latest
            - show_closest_lt
            - show_closest_gt
            - show_any
          description: |
            Version fallback when the requested version has no data:
            `strict` (no fallback), `show_latest`, `show_closest_lt`,
            `show_closest_gt`, `show_any`. Not applied to range endpoints.
        encoded:
          type: string
          default: none
          enum:
            - none
            - url_encoded
            - base64_encoded
          description: |
            Output encoding for content string values of the response
            (`none` default, `url_encoded`, `base64_encoded`). Control fields
            (`info_code`, `info_message`, `status`, `message`, `requirement`)
            and object keys are never encoded.
    ComponentVersionsInRange:
      type: object
      properties:
        purl:
          type: string
        versions_with:
          type: array
          items:
            type: string
        versions_without:
          type: array
          items:
            type: string
        info_code:
          $ref: '#/components/schemas/InfoCode'
        info_message:
          type: string
    BatchStatus:
      type: object
      required:
        - status
        - message
      properties:
        status:
          type: string
          enum:
            - SUCCESS
            - PARTIAL_SUCCESS
            - ERROR
        message:
          type: string
    InfoCode:
      type: string
      description: |
        Per-item resolution outcome. `REQUIREMENT_NOT_MET` is informational
        (a nearest-version was substituted); the others mark failures.
      enum:
        - REQUIREMENT_NOT_MET
        - INVALID_PURL
        - COMPONENT_NOT_FOUND
        - VERSION_NOT_FOUND
        - RESOLVE_FAILED
        - RELEASE_NOTES_UNAVAILABLE
        - WARNING

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.