aboutcode-org / aboutcode-org/vulnerablecode
Confidence should only be there when either fix or affected package is present
未關閉
- 主要語言
- Python
- 星號
- 702
- 分支
- 328
- 平均合併
- 3 天 8 小時
- 30 天內合併 PR
- 3
描述
Without a relationship between fixed/affected package to a vulnerability, confidence - by itself - does not provide any value in Inference.
We should have a check against this.
https://github.com/nexB/vulnerablecode/blob/2903edcef68de3137e57f804b022a22b2710c5c8/vulnerabilities/improver.py#L29-L72
Found while writing tests in: https://github.com/nexB/vulnerablecode/pull/1081
貢獻指南
這個儲存庫沒有索引到貢獻指南
評估
這個 Issue 還沒有評估資料。