[
  {
    "findingId": "library:pkg/internal-app@2.0.0",
    "status": "RequiresVex",
    "rule": "accept_vendor_vex"
  },
  {
    "findingId": "library:pkg/kev-component@3.1.4",
    "status": "RequiresVex",
    "rule": "accept_vendor_vex"
  }
]