import type { CveFinding } from '../../types/index.js';
/**
 * Fetch CVE findings for an npm package from the npm advisory bulk API.
 * POST https://registry.npmjs.org/-/npm/v1/security/advisories/bulk
 * Body: { [pkg]: [version] }
 * Returns [] on any error (network, timeout, parse).
 */
export declare function fetchNpmCve(pkg: string, version: string): Promise<CveFinding[]>;
/**
 * Fetch CVE findings for a PyPI package from the PyPI JSON API.
 * GET https://pypi.org/pypi/${pkg}/${version}/json
 * Extracts vulnerabilities array if present.
 * Returns [] on any error.
 */
export declare function fetchPypiCve(pkg: string, version: string): Promise<CveFinding[]>;
/**
 * Fetch CVE findings for a Rust crate.
 * NOTE: crates.io does not expose a public advisory/vulnerability API endpoint.
 * The RUSTSEC database (https://rustsec.org) is the authoritative source but
 * requires parsing a git repository or using the `cargo-audit` CLI.
 * This function returns [] — integration with cargo-audit CLI is a future enhancement.
 */
export declare function fetchCargoCve(_pkg: string, _version: string): Promise<CveFinding[]>;
//# sourceMappingURL=cve-fetcher.d.ts.map