{
  "exampleOnly": true,
  "notice": "Synthetic demonstration; not a live response or advisory.",
  "response": {
    "status": 200,
    "code": "ok",
    "data": {
      "generatedAt": "2026-09-21T00:00:00Z",
      "schemaVersion": "demo-security-v1",
      "serviceLevel": "best-effort",
      "coverageNotice": "Synthetic demonstration only. No live lookup occurred. Limited reviewed advisory fields; no match is not proof of safety.",
      "packages": [
        {
          "package": {
            "ecosystem": "npm",
            "name": "example-package",
            "version": "1.0.0"
          },
          "status": "needs-version-review",
          "hasMoreCandidates": false,
          "findings": [
            {
              "advisoryId": "SYNTHETIC-DEMO-ONLY",
              "match": "unknown",
              "summary": "Illustrative finding: verify the source and version rules before acting.",
              "cves": [],
              "reportedFixedVersions": [],
              "evidence": {
                "source": "osv-npm",
                "recordId": "SYNTHETIC-DEMO-ONLY",
                "snapshotHash": "0000000000000000000000000000000000000000000000000000000000000000",
                "sourceUrl": "https://github.com/github/advisory-database",
                "retrievedAt": "2026-09-21T00:00:00Z",
                "sourceUpdatedAt": null,
                "indexedAt": "2026-09-21T00:00:00Z",
                "license": "CC-BY-4.0",
                "licenseUrl": "https://creativecommons.org/licenses/by/4.0/",
                "attribution": "Synthetic shape example; no upstream advisory is reproduced.",
                "policyVersion": "synthetic-example",
                "licenseEvidenceHash": "0000000000000000000000000000000000000000000000000000000000000000"
              }
            }
          ]
        }
      ]
    },
    "allowance": {
      "requestsRemaining": 99,
      "dataBytesRemaining": 9998000,
      "resetsAt": "2026-09-22T00:00:00Z",
      "byteDefinition": "UTF-8 JSON data object only; excludes HTTP/MCP envelopes, headers and errors"
    },
    "retryAt": null
  }
}