{
  "actions": [
    {
      "action": "update",
      "module": "example-logger",
      "target": "3.5.0",
      "isMajor": false,
      "resolves": [
        {
          "id": 9000000,
          "path": "@orchard-example/gateway>example-logger",
          "dev": false,
          "optional": false,
          "bundled": false
        }
      ]
    },
    {
      "action": "update",
      "module": "example-cache",
      "target": "0.9.5",
      "isMajor": false,
      "resolves": [
        {
          "id": 9000001,
          "path": "@orchard-example/gateway>example-cache",
          "dev": false,
          "optional": false,
          "bundled": false
        }
      ]
    },
    {
      "action": "update",
      "module": "example-yaml-lite",
      "target": "1.2.0",
      "isMajor": false,
      "resolves": [
        {
          "id": 9000002,
          "path": "@orchard-example/gateway>example-yaml-lite",
          "dev": false,
          "optional": false,
          "bundled": false
        }
      ]
    },
    {
      "action": "update",
      "module": "example-json-path",
      "target": "2.1.0",
      "isMajor": false,
      "resolves": [
        {
          "id": 9000003,
          "path": "@orchard-example/gateway>example-json-path",
          "dev": false,
          "optional": false,
          "bundled": false
        }
      ]
    }
  ],
  "advisories": {
    "9000000": {
      "id": 9000000,
      "title": "SAMPLE advisory: fabricated improper-input-validation issue in a fictional logging library.",
      "module_name": "example-logger",
      "severity": "high",
      "vulnerable_versions": "<3.5.0",
      "patched_versions": ">=3.5.0",
      "cves": [
        "SAMPLE-CVE-2026-0001"
      ],
      "cwe": "CWE-20",
      "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0001",
      "recommendation": "Upgrade to version 3.5.0",
      "findings": [
        {
          "version": "3.4.1",
          "paths": [
            "@orchard-example/gateway>example-logger"
          ]
        }
      ]
    },
    "9000001": {
      "id": 9000001,
      "title": "SAMPLE advisory: fabricated unsafe-deserialisation issue in a fictional cache library.",
      "module_name": "example-cache",
      "severity": "critical",
      "vulnerable_versions": ">=0.9.0 <0.9.5",
      "patched_versions": ">=0.9.5",
      "cves": [
        "SAMPLE-CVE-2026-0002"
      ],
      "cwe": "CWE-502",
      "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0002",
      "recommendation": "Upgrade to version 0.9.5",
      "findings": [
        {
          "version": "0.9.2",
          "paths": [
            "@orchard-example/gateway>example-cache"
          ]
        }
      ]
    },
    "9000002": {
      "id": 9000002,
      "title": "SAMPLE advisory: fabricated uncontrolled-resource-consumption issue in a fictional parser.",
      "module_name": "example-yaml-lite",
      "severity": "moderate",
      "vulnerable_versions": "<1.2.0",
      "patched_versions": ">=1.2.0",
      "cves": [
        "SAMPLE-CVE-2026-0003"
      ],
      "cwe": "CWE-400",
      "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0003",
      "recommendation": "Upgrade to version 1.2.0",
      "findings": [
        {
          "version": "1.1.7",
          "paths": [
            "@orchard-example/gateway>example-yaml-lite"
          ]
        }
      ]
    },
    "9000003": {
      "id": 9000003,
      "title": "SAMPLE advisory: fabricated allocation-without-limits issue in a fictional query library.",
      "module_name": "example-json-path",
      "severity": "low",
      "vulnerable_versions": "<2.1.0",
      "patched_versions": ">=2.1.0",
      "cves": [
        "SAMPLE-CVE-2026-0004"
      ],
      "cwe": "CWE-770",
      "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0004",
      "recommendation": "Upgrade to version 2.1.0",
      "findings": [
        {
          "version": "2.0.5",
          "paths": [
            "@orchard-example/gateway>example-json-path"
          ]
        }
      ]
    }
  },
  "muted": [],
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 1,
      "moderate": 1,
      "high": 1,
      "critical": 1
    },
    "dependencies": 10,
    "devDependencies": 0,
    "optionalDependencies": 0,
    "totalDependencies": 10
  },
  "novus_sample_note": "Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists."
}