Addition of timestamps to analysis in VEX

[msymons]

I would like to see the specification support analysis timestamps in VEX

There are timestamps for each vulnerability:

• created
• published
• updated

Without a timestamp for analysis, it is not possible to determine if (for example) analysis was performed BEFORE the vulnerability was updated. This can really matter in cases where understanding of a vulnerability can change hugely after it was first published.