The CSAF file is always affiliated with one particular specific advisory as well as a offered advisory may well consist of one or more products version(s) and one or more parts, depending upon the item style and update https://medium.com/@linkdaddy/what-is-a-source-file-226b0fd56812