Source reference for a security advisory.
Source name, such as GitHub or FriendsOfPHP/security-advisories.
Source-specific advisory ID.
Source reference for a security advisory.