We are looking into implementing using the CVEList as an immediate ingestion pipeline, due to the presence of the versions fields in the CVE 5.x schema format. As such before optimising CVE5 to OSV Conversion, we first need an MVP to build off of.

This converter should only need to convert naively if given data in a common and expected format across the CVE5 JSON.