      "should return an array": function(res) {
        assert.isArray(res);
      },
NVD is only using a subset of CWE for mapping instead of the entire CWE, and the weakness type is not covered by that subset.