Similar to https://github.com/google/osv.dev/issues/2101, we are not handling deletions for REST sources by marking the advisories as withdrawn.