CSAF is used at run time in 2 crates.

Depender (with downloads and own rev deps) CSAF version
210 sbom-cli ^0.5.0
160 csaf-cli ^0.5.0