{
  "auditReportVersion": 2,
  "vulnerabilities": {
    "example-logger": {
      "name": "example-logger",
      "severity": "high",
      "isDirect": false,
      "via": [
        {
          "source": 9000000,
          "name": "example-logger",
          "dependency": "example-logger",
          "title": "SAMPLE advisory: fabricated improper-input-validation issue in a fictional logging library.",
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0001",
          "severity": "high",
          "cwe": [
            "CWE-20"
          ],
          "cvss": {
            "score": 8.1,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
          },
          "range": "<3.5.0"
        }
      ],
      "effects": [
        "@orchard-example/router",
        "@orchard-example/http-core",
        "example-metrics"
      ],
      "range": "<3.5.0",
      "nodes": [
        "node_modules/example-logger"
      ],
      "fixAvailable": {
        "name": "example-logger",
        "version": "3.5.0",
        "isSemVerMajor": false
      }
    },
    "example-cache": {
      "name": "example-cache",
      "severity": "critical",
      "isDirect": true,
      "via": [
        {
          "source": 9000001,
          "name": "example-cache",
          "dependency": "example-cache",
          "title": "SAMPLE advisory: fabricated unsafe-deserialisation issue in a fictional cache library.",
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0002",
          "severity": "critical",
          "cwe": [
            "CWE-502"
          ],
          "cvss": {
            "score": 9.3,
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
          },
          "range": ">=0.9.0 <0.9.5"
        }
      ],
      "effects": [],
      "range": ">=0.9.0 <0.9.5",
      "nodes": [
        "node_modules/example-cache"
      ],
      "fixAvailable": {
        "name": "example-cache",
        "version": "0.9.5",
        "isSemVerMajor": false
      }
    },
    "example-yaml-lite": {
      "name": "example-yaml-lite",
      "severity": "moderate",
      "isDirect": false,
      "via": [
        {
          "source": 9000002,
          "name": "example-yaml-lite",
          "dependency": "example-yaml-lite",
          "title": "SAMPLE advisory: fabricated uncontrolled-resource-consumption issue in a fictional parser.",
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0003",
          "severity": "moderate",
          "cwe": [
            "CWE-400"
          ],
          "cvss": {
            "score": 5.4,
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
          },
          "range": "<1.2.0"
        }
      ],
      "effects": [
        "example-cache"
      ],
      "range": "<1.2.0",
      "nodes": [
        "node_modules/example-yaml-lite"
      ],
      "fixAvailable": {
        "name": "example-yaml-lite",
        "version": "1.2.0",
        "isSemVerMajor": false
      }
    },
    "example-json-path": {
      "name": "example-json-path",
      "severity": "low",
      "isDirect": false,
      "via": [
        {
          "source": 9000003,
          "name": "example-json-path",
          "dependency": "example-json-path",
          "title": "SAMPLE advisory: fabricated allocation-without-limits issue in a fictional query library.",
          "url": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0004",
          "severity": "low",
          "cwe": [
            "CWE-770"
          ],
          "cvss": {
            "score": 3.1,
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L"
          },
          "range": "<2.1.0"
        }
      ],
      "effects": [
        "@orchard-example/http-core",
        "example-yaml-lite"
      ],
      "range": "<2.1.0",
      "nodes": [
        "node_modules/example-json-path"
      ],
      "fixAvailable": {
        "name": "example-json-path",
        "version": "2.1.0",
        "isSemVerMajor": false
      }
    }
  },
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 1,
      "moderate": 1,
      "high": 1,
      "critical": 1,
      "total": 4
    },
    "dependencies": {
      "prod": 10,
      "dev": 0,
      "optional": 0,
      "peer": 0,
      "peerOptional": 0,
      "total": 10
    }
  },
  "novus_sample_note": "Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists."
}