{
    "bomFormat": "CycloneDX",
    "specVersion": "1.6",
    "version": 1,
    "metadata": {
        "timestamp": "2025-10-25T18:27:06Z",
        "component": {
            "bom-ref": "pkg:devguard/neu@main",
            "type": "application",
            "author": "Test Org",
            "publisher": "github.com/l3montree-dev/devguard",
            "name": "",
            "version": "main"
        }
    },
    "vulnerabilities": [
        {
            "id": "CVE-2020-25649",
            "source": {
                "name": "NVD",
                "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25649"
            },
            "analysis": {
                "state": "exploitable",
                "response": [
                    "will_not_fix"
                ],
                "detail": "We cannot do anything about it! It is a core library from our project. We need to accept the risk for now."
            },
            "affects": [
                {
                    "ref": "pkg:golang/github.com/jinzhu/inflection@v1.0.0"
                }
            ]
        }
    ]
}