{
  "database": {
    "advisory-count": 4,
    "last-commit": "8d17585e3ab1312c7fa4331e85480d2bd29032a0",
    "last-updated": "2026-01-01T00:00:00Z"
  },
  "lockfile": {
    "dependency-count": 9
  },
  "settings": {
    "target_arch": [],
    "target_os": [],
    "severity": null,
    "ignore": [
      "NOVUS-SAMPLE-2026-0004"
    ]
  },
  "vulnerabilities": {
    "found": true,
    "count": 3,
    "list": [
      {
        "advisory": {
          "id": "NOVUS-SAMPLE-2026-0001",
          "package": "example-logger",
          "title": "SAMPLE advisory: fabricated improper-input-validation issue in a fictional logging library.",
          "description": "SAMPLE advisory: fabricated improper-input-validation issue in a fictional logging library.",
          "date": "2026-01-05",
          "aliases": [
            "SAMPLE-CVE-2026-0001"
          ],
          "cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "categories": [
            "denial-of-service"
          ],
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0001"
        },
        "versions": {
          "patched": [
            ">=3.5.0"
          ],
          "unaffected": []
        },
        "package": {
          "name": "example-logger",
          "version": "3.4.1",
          "source": "registry+https://crates.orchard.example/index",
          "checksum": "48dd8daec278890d29fd4f0424f2fb4d85628d72832612a0a9051e3154b98859"
        }
      },
      {
        "advisory": {
          "id": "NOVUS-SAMPLE-2026-0002",
          "package": "example-cache",
          "title": "SAMPLE advisory: fabricated unsafe-deserialisation issue in a fictional cache library.",
          "description": "SAMPLE advisory: fabricated unsafe-deserialisation issue in a fictional cache library.",
          "date": "2026-01-05",
          "aliases": [
            "SAMPLE-CVE-2026-0002"
          ],
          "cvss": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "categories": [
            "denial-of-service"
          ],
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0002"
        },
        "versions": {
          "patched": [
            ">=0.9.5"
          ],
          "unaffected": []
        },
        "package": {
          "name": "example-cache",
          "version": "0.9.2",
          "source": "registry+https://crates.orchard.example/index",
          "checksum": "ca8c65b32ceccf756566d16cd70f68aceddf73461beb416005fc1d3144ab8646"
        }
      },
      {
        "advisory": {
          "id": "NOVUS-SAMPLE-2026-0003",
          "package": "example-yaml-lite",
          "title": "SAMPLE advisory: fabricated uncontrolled-resource-consumption issue in a fictional parser.",
          "description": "SAMPLE advisory: fabricated uncontrolled-resource-consumption issue in a fictional parser.",
          "date": "2026-01-05",
          "aliases": [
            "SAMPLE-CVE-2026-0003"
          ],
          "cvss": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "categories": [
            "denial-of-service"
          ],
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0003"
        },
        "versions": {
          "patched": [
            ">=1.2.0"
          ],
          "unaffected": []
        },
        "package": {
          "name": "example-yaml-lite",
          "version": "1.1.7",
          "source": "registry+https://crates.orchard.example/index",
          "checksum": "297729bc882b229e0d383027459b2a376c92e35fda24d369fd4327f23b3b865b"
        }
      }
    ]
  },
  "warnings": {
    "unmaintained": [
      {
        "kind": "unmaintained",
        "package": {
          "name": "example-crypto-shim",
          "version": "1.2.0"
        },
        "advisory": {
          "id": "NOVUS-SAMPLE-2026-0005",
          "title": "SAMPLE: fictional crate is unmaintained"
        }
      }
    ]
  },
  "novus_sample_note": "Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists."
}