# `scan_dependency_vulnerabilities`

Use after `refresh_advisories`, or when a suitable cache already exists, to
match the current exact dependency inventory locally against validated records.

Inputs: optional `max_age_days` from 1 to 365 (default 30), plus optional
`output_format`.

```json
{"max_age_days":30,"output_format":"json"}
```

Missing, stale, partial, or inventory-mismatched cache evidence is
`NOT_CHECKED` or `PARTIAL`, never zero vulnerabilities.