https://packages.broadcom.com/photon/photon_cve_metadata schema was changed

Describe the bug

Hello!

We use advisories from https://packages.broadcom.com/photon/photon_cve_metadata/cve_data_photon<ver>.json (where ver we take from the photon_versions.json file).
Yesterday changes occurred in the repository:

• The photon_versions.json file was deleted.
• Instead of a file with advisories for a specific release (for example, cve_data_photon5.0.json), there's a cve folder. The information in these advisories doesn't include:
  • release number
  • cve_score

Are these expected changes?
If yes, are you planning to somehow enrich these advisories with the data that was "lost"?
Or perhaps you have another source to get CVE lists in machine-readable format.

Thanks in advance for your response!
Regards, Dmitriy

Reproduction steps

1. Check photon_versions.json and cve_data_photon<ver>.json files in https://packages.broadcom.com/photon/photon_cve_metadata.

Expected behavior

The existence of photon_versions.json and cve_data_photon<ver>.json files

Additional context

No response

Compare photon_versions.json and the cve_data_photon.json files referenced in the issue with the current cve folder contents at the packages.broadcom.com URL. Determine whether the changed schema is intentional and whether release numbers, CVE scores, or an alternative machine-readable source are available; done means a maintainer-confirmed source and migration guidance.