{
  "generated": "2026-01-01T00:00:00Z",
  "repository": "orchard-example/gateway (fictional)",
  "alerts": [
    {
      "number": 1,
      "state": "open",
      "dependency": {
        "package": {
          "ecosystem": "npm",
          "name": "example-logger"
        },
        "manifest_path": "package-lock.json",
        "scope": "runtime"
      },
      "security_advisory": {
        "ghsa_id": "SAMPLE-ADVISORY-0001",
        "summary": "SAMPLE advisory: fabricated improper-input-validation issue in a fictional logging library.",
        "severity": "high",
        "cve_id": "SAMPLE-CVE-2026-0001",
        "identifiers": [
          {
            "type": "SAMPLE",
            "value": "NOVUS-SAMPLE-2026-0001"
          }
        ],
        "cvss": {
          "score": 8.1,
          "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        },
        "cwes": [
          {
            "cwe_id": "CWE-20",
            "name": "SAMPLE weakness class"
          }
        ]
      },
      "security_vulnerability": {
        "package": {
          "ecosystem": "npm",
          "name": "example-logger"
        },
        "severity": "high",
        "vulnerable_version_range": "<3.5.0",
        "first_patched_version": {
          "identifier": "3.5.0"
        }
      },
      "created_at": "2026-01-05T00:00:00Z",
      "dismissed_reason": null
    },
    {
      "number": 2,
      "state": "dismissed",
      "dependency": {
        "package": {
          "ecosystem": "npm",
          "name": "example-cache"
        },
        "manifest_path": "package-lock.json",
        "scope": "runtime"
      },
      "security_advisory": {
        "ghsa_id": "SAMPLE-ADVISORY-0002",
        "summary": "SAMPLE advisory: fabricated unsafe-deserialisation issue in a fictional cache library.",
        "severity": "critical",
        "cve_id": "SAMPLE-CVE-2026-0002",
        "identifiers": [
          {
            "type": "SAMPLE",
            "value": "NOVUS-SAMPLE-2026-0002"
          }
        ],
        "cvss": {
          "score": 9.3,
          "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
        },
        "cwes": [
          {
            "cwe_id": "CWE-502",
            "name": "SAMPLE weakness class"
          }
        ]
      },
      "security_vulnerability": {
        "package": {
          "ecosystem": "npm",
          "name": "example-cache"
        },
        "severity": "critical",
        "vulnerable_version_range": ">=0.9.0 <0.9.5",
        "first_patched_version": {
          "identifier": "0.9.5"
        }
      },
      "created_at": "2026-01-05T00:00:00Z",
      "dismissed_reason": "tolerable_risk"
    },
    {
      "number": 3,
      "state": "fixed",
      "dependency": {
        "package": {
          "ecosystem": "npm",
          "name": "example-yaml-lite"
        },
        "manifest_path": "package-lock.json",
        "scope": "runtime"
      },
      "security_advisory": {
        "ghsa_id": "SAMPLE-ADVISORY-0003",
        "summary": "SAMPLE advisory: fabricated uncontrolled-resource-consumption issue in a fictional parser.",
        "severity": "medium",
        "cve_id": "SAMPLE-CVE-2026-0003",
        "identifiers": [
          {
            "type": "SAMPLE",
            "value": "NOVUS-SAMPLE-2026-0003"
          }
        ],
        "cvss": {
          "score": 5.4,
          "vector_string": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
        },
        "cwes": [
          {
            "cwe_id": "CWE-400",
            "name": "SAMPLE weakness class"
          }
        ]
      },
      "security_vulnerability": {
        "package": {
          "ecosystem": "npm",
          "name": "example-yaml-lite"
        },
        "severity": "medium",
        "vulnerable_version_range": "<1.2.0",
        "first_patched_version": {
          "identifier": "1.2.0"
        }
      },
      "created_at": "2026-01-05T00:00:00Z",
      "dismissed_reason": null
    },
    {
      "number": 4,
      "state": "open",
      "dependency": {
        "package": {
          "ecosystem": "npm",
          "name": "example-json-path"
        },
        "manifest_path": "package-lock.json",
        "scope": "runtime"
      },
      "security_advisory": {
        "ghsa_id": "SAMPLE-ADVISORY-0004",
        "summary": "SAMPLE advisory: fabricated allocation-without-limits issue in a fictional query library.",
        "severity": "low",
        "cve_id": "SAMPLE-CVE-2026-0004",
        "identifiers": [
          {
            "type": "SAMPLE",
            "value": "NOVUS-SAMPLE-2026-0004"
          }
        ],
        "cvss": {
          "score": 3.1,
          "vector_string": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L"
        },
        "cwes": [
          {
            "cwe_id": "CWE-770",
            "name": "SAMPLE weakness class"
          }
        ]
      },
      "security_vulnerability": {
        "package": {
          "ecosystem": "npm",
          "name": "example-json-path"
        },
        "severity": "low",
        "vulnerable_version_range": "<2.1.0",
        "first_patched_version": {
          "identifier": "2.1.0"
        }
      },
      "created_at": "2026-01-05T00:00:00Z",
      "dismissed_reason": null
    }
  ],
  "novus_sample_note": "Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists."
}