[
{
"url": "http://public.vulnerablecode.io/api/packages/168702",
"purl": "pkg:maven/junit/junit@4.12",
"type": "maven",
"namespace": "junit",
"name": "junit",
"version": "4.12",
"qualifiers": {},
"subpath": "",
"affected_by_vulnerabilities": [
{
"url": "http://public.vulnerablecode.io/api/vulnerabilities/1265",
"vulnerability_id": "VCID-e1bu-4uh4-aaac",
"summary": "",
....
In this we have URLs such as
that leak internal record ids/primary keys.
We should provide either a GUID or a natural key instead.