{
  "@context": "https://openvex.dev/ns/v0.2.0",
  "@id": "https://vex.orchard.example/2ddc7cac-b207-4092-afcc-742f1d216c43",
  "author": "Example Softworks (fictional)",
  "role": "Document Creator",
  "timestamp": "2026-01-01T00:00:00Z",
  "version": 1,
  "tooling": "novus-examples-vex-fixture/1.0.0",
  "statements": [
    {
      "vulnerability": {
        "name": "NOVUS-SAMPLE-2026-0001",
        "@id": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0001",
        "aliases": [
          "SAMPLE-CVE-2026-0001"
        ]
      },
      "timestamp": "2026-01-01T00:00:00Z",
      "products": [
        {
          "@id": "pkg:npm/%40orchard-example/gateway@4.2.0",
          "subcomponents": [
            {
              "@id": "pkg:npm/example-logger@3.4.1"
            }
          ]
        }
      ],
      "status": "affected",
      "action_statement": "Upgrade example-logger to 3.5.0."
    },
    {
      "vulnerability": {
        "name": "NOVUS-SAMPLE-2026-0002",
        "@id": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0002",
        "aliases": [
          "SAMPLE-CVE-2026-0002"
        ]
      },
      "timestamp": "2026-01-01T00:00:00Z",
      "products": [
        {
          "@id": "pkg:npm/%40orchard-example/gateway@4.2.0",
          "subcomponents": [
            {
              "@id": "pkg:npm/example-cache@0.9.2"
            }
          ]
        }
      ],
      "status": "not_affected",
      "justification": "vulnerable_code_not_in_execute_path",
      "impact_statement": "SAMPLE: the fictional affected path is never called."
    },
    {
      "vulnerability": {
        "name": "NOVUS-SAMPLE-2026-0003",
        "@id": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0003",
        "aliases": [
          "SAMPLE-CVE-2026-0003"
        ]
      },
      "timestamp": "2026-01-01T00:00:00Z",
      "products": [
        {
          "@id": "pkg:npm/%40orchard-example/gateway@4.2.0",
          "subcomponents": [
            {
              "@id": "pkg:npm/example-yaml-lite@1.1.7"
            }
          ]
        }
      ],
      "status": "fixed"
    },
    {
      "vulnerability": {
        "name": "NOVUS-SAMPLE-2026-0004",
        "@id": "https://advisories.orchard.example/NOVUS-SAMPLE-2026-0004",
        "aliases": [
          "SAMPLE-CVE-2026-0004"
        ]
      },
      "timestamp": "2026-01-01T00:00:00Z",
      "products": [
        {
          "@id": "pkg:npm/%40orchard-example/gateway@4.2.0",
          "subcomponents": [
            {
              "@id": "pkg:npm/example-json-path@2.0.5"
            }
          ]
        }
      ],
      "status": "under_investigation"
    }
  ],
  "novus_sample_note": "Advisory identifiers use the invented NOVUS-SAMPLE namespace with SAMPLE-CVE aliases; no identifier here refers to a published CVE, GHSA or OSV record, and no package named exists."
}