The time should be the time of the commit for that branch. That's used to determine vulnerabilities when you are not using a specific version but a branch. So, that's important to get it right. Thanks.