Could you document what is ```metadata``` (e.g. a Node object holding a vulnerability model header) and what is ```data``` (????) ?