{
"project": (string),
"version": (string),
"file": (string),
"line": (int),
"type": (string, see above),
"CVE": ((string | string[] | null), CVE-XXXX-XXXX),
"report": ((string | string[] | null), bug report or CVE report),
"patch": ((string | string[] | null), patch commit),
"code": (string)
}
{
"project": (string),
"version": (string),
"source": {
"file": (string),
"line": (int),
"code": (string)
},
"sink": {
"file": (string),
"line": (int),
"code": (string)
},
"type": (string, see above),
"CVE": ((string | string[] | null), CVE-XXXX-XXXX),
"report": ((string | string[] | null), bug report or CVE report),
"patch": ((string | string[] | null), patch commit)
}