<?xml version="1.0" encoding="UTF-8"?>
<analysis xmlns="https://jeremylong.github.io/DependencyCheck/dependency-check.2.5.xsd">
  <scanInfo><engineVersion>0.0.0-sample</engineVersion></scanInfo>
  <projectInfo>
    <name>orchard-gateway</name>
    <reportDate>2026-01-01T00:00:00Z</reportDate>
    <credits>Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists.</credits>
  </projectInfo>
  <dependencies>
    <dependency>
      <fileName>example-logger-3.4.1.tgz</fileName>
      <sha256>7fb72ea58987e5327259b66384f96f5e657c3ce5225b8891c567cac6b58430ec</sha256>
      <vulnerabilities>
        <vulnerability source="NOVUS-SAMPLE">
          <name>NOVUS-SAMPLE-2026-0001</name>
          <severity>HIGH</severity>
          <cvssV3><baseScore>8.1</baseScore><baseSeverity>HIGH</baseSeverity></cvssV3>
          <cwes><cwe>CWE-20</cwe></cwes>
          <description>SAMPLE advisory: fabricated improper-input-validation issue in a fictional logging library.</description>
          <vulnerableSoftware>
            <software versionEndExcluding="3.5.0">pkg:npm/example-logger@3.4.1</software>
          </vulnerableSoftware>
        </vulnerability>
      </vulnerabilities>
    </dependency>
    <dependency>
      <fileName>example-cache-0.9.2.tgz</fileName>
      <sha256>f7af2ad2d3c3daaa5991b0eae38ffa151a2e2f3bf0f2bdd7333adc3a1dc860f7</sha256>
      <vulnerabilities>
        <vulnerability source="NOVUS-SAMPLE">
          <name>NOVUS-SAMPLE-2026-0002</name>
          <severity>CRITICAL</severity>
          <cvssV3><baseScore>9.3</baseScore><baseSeverity>CRITICAL</baseSeverity></cvssV3>
          <cwes><cwe>CWE-502</cwe></cwes>
          <description>SAMPLE advisory: fabricated unsafe-deserialisation issue in a fictional cache library.</description>
          <vulnerableSoftware>
            <software versionEndExcluding="0.9.5">pkg:npm/example-cache@0.9.2</software>
          </vulnerableSoftware>
        </vulnerability>
      </vulnerabilities>
    </dependency>
    <dependency>
      <fileName>example-yaml-lite-1.1.7.tgz</fileName>
      <sha256>d7094de3c8e15621381e5f9f02c0eecb9977d249a8a06ab2b0a34f5344a039af</sha256>
      <vulnerabilities>
        <vulnerability source="NOVUS-SAMPLE">
          <name>NOVUS-SAMPLE-2026-0003</name>
          <severity>MEDIUM</severity>
          <cvssV3><baseScore>5.4</baseScore><baseSeverity>MEDIUM</baseSeverity></cvssV3>
          <cwes><cwe>CWE-400</cwe></cwes>
          <description>SAMPLE advisory: fabricated uncontrolled-resource-consumption issue in a fictional parser.</description>
          <vulnerableSoftware>
            <software versionEndExcluding="1.2.0">pkg:npm/example-yaml-lite@1.1.7</software>
          </vulnerableSoftware>
        </vulnerability>
      </vulnerabilities>
    </dependency>
    <dependency>
      <fileName>example-json-path-2.0.5.tgz</fileName>
      <sha256>74e30e4812a0cc92bd7c1a965e6f953f5d92b9eaf3cd77d90663a7344e939b63</sha256>
      <vulnerabilities>
        <vulnerability source="NOVUS-SAMPLE">
          <name>NOVUS-SAMPLE-2026-0004</name>
          <severity>LOW</severity>
          <cvssV3><baseScore>3.1</baseScore><baseSeverity>LOW</baseSeverity></cvssV3>
          <cwes><cwe>CWE-770</cwe></cwes>
          <description>SAMPLE advisory: fabricated allocation-without-limits issue in a fictional query library.</description>
          <vulnerableSoftware>
            <software versionEndExcluding="2.1.0">pkg:npm/example-json-path@2.0.5</software>
          </vulnerableSoftware>
        </vulnerability>
      </vulnerabilities>
    </dependency>
  </dependencies>
</analysis>
