advisories keyed precisely to affected package versions and commits, aggregated from GHSA, PyPA, RustSec