fix: add special case for drupal/currency

Author: G-Rath

advisories/currency/DRUPAL-CONTRIB-2025-110.json

@@ -10,7 +10,7 @@
   "affected": [
     {
       "package": {
-        "ecosystem": "Packagist",
+        "ecosystem": "Packagist:https://packages.drupal.org/8",
         "name": "drupal/currency"
       },
       "severity": [],

scripts/generate_osv_advisories.py

@@ -413,7 +413,13 @@ def build_osv_advisory(
   ecosystem = 'Packagist'
 
   # record the Composer repository the affected package is sourced from
-  if composer_package_name not in drupal_packages_available_on_packagist:
+  #
+  # note there is a special case for drupal/currency as it was published
+  # on Packagist initially before later moving to the Drupal repository
+  if (
+    composer_package_name == 'drupal/currency'
+    or composer_package_name not in drupal_packages_available_on_packagist
+  ):
     ecosystem += ':https://packages.drupal.org/8'
 
   osv_advisory: osv.Vulnerability = {