/**
 * Canonical CVE / GHSA identifiers for deduplication across OSV and NVD.
 */
export type CveFindingLike = {
    id: string;
    severity?: string;
    summary?: string;
    source?: string;
};
/** Pick a stable dedup key: prefer CVE-YYYY-NNNN when present in id or aliases. */
export declare function canonicalVulnId(id: string, aliases?: string[]): string;
export declare function dedupeCveFindings<T extends CveFindingLike>(findings: T[], aliasMap?: Map<string, string[]>): T[];
//# sourceMappingURL=cve-canonical.d.ts.map