everything comes in as a hash(

[]map[string]string

) so I can have my application have a field like

OSVersion

, which is independent of that, and if

os_version.version

ever changes in the osquery API I can just have two lookups to see which one is there