{
 "matches": [
  {
   "vulnerability": {
    "id": "CVE-1999-0001",
    "dataSource": "",
    "severity": "Low",
    "urls": [],
    "description": "1999-01 description",
    "cvss": [
     {
      "version": "3.0",
      "vector": "another vector",
      "metrics": {
       "baseScore": 4
      },
      "vendorMetadata": {}
     }
    ],
    "fix": {
     "versions": [
      "the-next-version"
     ],
     "state": "fixed"
    },
    "advisories": []
   },
   "relatedVulnerabilities": [],
   "matchDetails": [
    {
     "type": "exact-direct-match",
     "matcher": "dpkg-matcher",
     "searchedBy": {
      "distro": {
       "type": "ubuntu",
       "version": "20.04"
      }
     },
     "found": {
      "constraint": ">= 20"
     }
    }
   ],
   "artifact": {
    "id": "9baa2db122fea516",
    "name": "package-1",
    "version": "1.1.1",
    "type": "rpm",
    "locations": [
     {
      "path": "/foo/bar/somefile-1.txt"
     }
    ],
    "language": "",
    "licenses": [],
    "cpes": [
     "cpe:2.3:a:anchore:engine:0.9.2:*:*:python:*:*:*:*"
    ],
    "purl": "",
    "upstreams": [],
    "metadataType": "RpmMetadata",
    "metadata": {
     "epoch": 2,
     "modularityLabel": null
    }
   }
  },
  {
   "vulnerability": {
    "id": "CVE-1999-0002",
    "dataSource": "",
    "severity": "Critical",
    "urls": [],
    "description": "1999-02 description",
    "cvss": [
     {
      "version": "2.0",
      "vector": "vector",
      "metrics": {
       "baseScore": 1,
       "exploitabilityScore": 2,
       "impactScore": 3
      },
      "vendorMetadata": {
       "BaseSeverity": "Low",
       "Status": "verified"
      }
     }
    ],
    "fix": {
     "versions": [],
     "state": ""
    },
    "advisories": []
   },
   "relatedVulnerabilities": [],
   "matchDetails": [
    {
     "type": "exact-indirect-match",
     "matcher": "dpkg-matcher",
     "searchedBy": {
      "cpe": "somecpe"
     },
     "found": {
      "constraint": "somecpe"
     }
    }
   ],
   "artifact": {
    "id": "7bb53d560434bc7f",
    "name": "package-2",
    "version": "2.2.2",
    "type": "deb",
    "locations": [
     {
      "path": "/foo/bar/somefile-2.txt"
     }
    ],
    "language": "",
    "licenses": [
     "Apache-2.0",
     "MIT"
    ],
    "cpes": [
     "cpe:2.3:a:anchore:engine:2.2.2:*:*:python:*:*:*:*"
    ],
    "purl": "",
    "upstreams": []
   }
  }
 ],
 "source": {
  "type": "directory",
  "target": "/some/path"
 },
 "distro": {
  "name": "centos",
  "version": "8.0",
  "idLike": [
   "centos"
  ]
 },
 "descriptor": {
  "name": "grype",
  "version": "[not provided]",
  "timestamp":""
 }
}
