Store the Fact: Why Alerts Get Real Foreign Keys

The system I reviewed for reference computes CVE-to-CVE relationships on the fly, at query time. Nothing stored, everything derived when someone asks. For that use case it works fine. For the alert la