A schema for describing a vulnerability in an open source package. See also https://ossf.github.io/osv-schema/