The `remediations` key in metadata can be:

1. not present
2. be null
3. be [null]
4. array of Hashes with "summary" and "diff" keys