Serialization details

[bobmcwhirter]

I recently found my API is spewing stuff like

          "additionalProp3": [
            {
              "affected": {
                "end_version": "string",
                "start_version": "string"
              }
            },
            {
              "notaffected": {
                "version": "string"
              }
            },
            {
              "fixed": {
                "version": "string"
              }
            }
          ]
        }
      },
      "cvss3_scores": [
        "string"
      ],
      "vulnerability_id": "string"
    }
  ],
  "withdrawn": "2024-04-16T14:57:17.921Z"
}

Where:

1. notaffected is lowercase of rust NotAffected -- seems hard to read. Should it be kebab?
2. cvss3_scores is pascal-cased (I think?). Should it be kebab?