{
  "_id": "0000000000000000000000aa",
  "tenantId": "demo-tenant",
  "source": "ghsa",
  "advisoryId": "GHSA-xxxx-yyyy",
  "observations": [ "000000000000000000000001" ],
  "normalized": {
    "purls": [ "pkg:npm/example" ],
    "versions": [ "1.2.3" ],
    "ranges": [ { "type": "semver", "events": [ { "introduced": "0" }, { "fixed": "1.2.4" } ] } ],
    "severities": [ { "system": "cvssv3.1", "score": 7.5, "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ],
    "scopes": [ "runtime", "build" ],
    "relationships": [
      { "type": "depends_on", "source": "pkg:npm/example@1.2.3", "target": "pkg:npm/lib@4.5.6", "provenance": "sbom:inventory-2025-10-01" }
    ]
  },
  "confidence": 1.0,
  "conflicts": [],
  "createdAt": "2025-10-06T12:05:00Z",
  "builtByJobId": "linkset-builder-456",
  "provenance": {
    "observationHashes": [ "sha256:abc123" ],
    "toolVersion": "lnm-1.0.0",
    "policyHash": "sha256:def456"
  }
}