nvd-cves is used at run time in 2 crates (of which 1 optionally).

Depender nvd-cves version
nvd-api ^0.1.1
attackerkb-api-rs optional ^0.1.1