The CSAF file is usually linked to one specific advisory as well as a supplied advisory could involve a number of item version(s) and a number of components, according to the product or service kind and update https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812