{"source":"https://contributable.vercel.app","licence":"CC BY 4.0","methodology":"https://contributable.vercel.app/methodology","v":2,"owner":"aboutcode-org","name":"vulnerablecode","updatedAt":"2026-10-11T05:46:07.705Z","coveredSince":"2025-10-04T18:09:26.484Z","facts":{"owner":"aboutcode-org","name":"vulnerablecode","description":"A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode  Docs at https://vulnerablecode.readthedocs.org/","stars":711,"forks":341,"archived":false,"isFork":false,"license":"Apache-2.0","defaultBranch":"main","pushedAt":"2026-10-08T13:34:33Z","createdAt":"2017-05-19T07:56:17Z","topics":["cve","security","security-tools","vulnerability-detection","vulnerability","vulnerability-databases","vulnerability-database","vulnerability-scanners","vulnerability-identification","vulndb","ossindex","snyk","nvd","cpe","cvss","osv","package-url","purl"],"languages":{"Python":2813542,"HTML":1108717,"CSS":108566,"JavaScript":58662,"Makefile":5520,"Nix":5268,"Shell":2550,"Dockerfile":1170},"frameworks":["Django"],"commits90d":103,"releases365d":13,"lastReleaseAt":"2026-10-06T16:40:17Z","gettingStarted":{"contributing":false,"codeOfConduct":false,"issueTemplates":false,"devcontainer":false,"cla":"none","channels":[{"kind":"slack","url":"https://join.slack.com/t/aboutcode-org/shared_invite/zt-3li3bfs78-mmtKG0Qhv~G2dSlNCZW2pA"},{"kind":"gitter","url":"https://gitter.im/aboutcode-org/vulnerablecode"}],"policy":null}},"metrics":{"computedAt":"2026-10-11T05:46:07.705Z","outsidePulls":{"cohort":{"n":29,"merged":13,"closedUnmerged":3,"open":13,"mergeRate":0.8125,"openShare":0.4482758620689655,"evidence":{"merged":[2397,2370,2368,2363,2362,2358,2353,2351,2350,2349,2347,2346,2345],"closedUnmerged":[2424,2400,2394],"open":[2427,2423,2420,2408,2398,2393,2392,2391,2388,2378,2376,2375,2356]}},"firstTimers":{"n":12,"merged":1,"closedUnmerged":2,"open":9,"mergeRate":null,"openShare":0.75,"evidence":{"merged":[2397],"closedUnmerged":[2400,2394],"open":[2427,2423,2420,2398,2393,2392,2388,2376,2375]}},"year":{"n":140,"merged":43,"closedUnmerged":36,"open":61,"mergeRate":0.5443037974683544,"openShare":0.4357142857142857,"evidence":{"merged":[2397,2370,2368,2363,2362,2358,2353,2351,2350,2349,2347,2346,2345,2340,2336,2335,2309,2301,2292,2287],"closedUnmerged":[2424,2400,2394,2258,2245,2242,2239,2237,2232,2226,2195,2194,2193,2178,2173,2170,2168,2166,2139,2136],"open":[2427,2423,2420,2408,2398,2393,2392,2391,2388,2378,2376,2375,2356,2328,2312,2248,2247,2246,2243,2240]}}},"pullFirstResponse":{"n":29,"answered":11,"waiting":18,"medianHours":null,"p75Hours":null,"within48h":0.06896551724137923,"within7d":0.17241379310344818,"curve":[{"hours":5.683055555555556,"waiting":0.9655172413793104},{"hours":29.98027777777778,"waiting":0.9310344827586208},{"hours":57.592777777777776,"waiting":0.8965517241379312},{"hours":94.38388888888889,"waiting":0.8620689655172415},{"hours":118.305,"waiting":0.8275862068965518},{"hours":342.94944444444445,"waiting":0.7931034482758622},{"hours":570.0361111111112,"waiting":0.7586206896551726},{"hours":793.2308333333333,"waiting":0.724137931034483},{"hours":806.5544444444445,"waiting":0.6896551724137933},{"hours":823.3372222222222,"waiting":0.6551724137931035},{"hours":1651.0775,"waiting":0.616632860040568}],"evidence":{"answered":[2427,2424,2423,2400,2398,2397,2391,2378,2376,2375,2356],"waiting":[2420,2408,2394,2393,2392,2388,2370,2368,2363,2362,2358,2353,2351,2350,2349,2347,2346,2345]}},"timeToMerge":{"n":29,"merged":13,"medianHours":null,"evidence":[2397,2370,2368,2363,2362,2358,2353,2351,2350,2349,2347,2346,2345]},"issueFirstResponse":{"n":34,"answered":17,"waiting":17,"medianHours":1297.3472222222222,"p75Hours":null,"within48h":0.20588235294117652,"within7d":0.3529411764705883,"curve":[{"hours":0.3552777777777778,"waiting":0.9705882352941176},{"hours":1.0530555555555556,"waiting":0.9411764705882353},{"hours":1.4236111111111112,"waiting":0.9117647058823529},{"hours":10.965555555555556,"waiting":0.8823529411764706},{"hours":16.89638888888889,"waiting":0.8529411764705882},{"hours":24.248333333333335,"waiting":0.8235294117647058},{"hours":27.25722222222222,"waiting":0.7941176470588235},{"hours":50.565555555555555,"waiting":0.7647058823529411},{"hours":74.04027777777777,"waiting":0.7352941176470588},{"hours":102.51472222222222,"waiting":0.7058823529411764},{"hours":131.24722222222223,"waiting":0.676470588235294},{"hours":132.855,"waiting":0.6470588235294117},{"hours":243.76277777777779,"waiting":0.6176470588235293},{"hours":310.59472222222223,"waiting":0.588235294117647},{"hours":448.38194444444446,"waiting":0.5588235294117646},{"hours":1111.9669444444444,"waiting":0.5238970588235293},{"hours":1297.3472222222222,"waiting":0.4864758403361344}],"evidence":{"answered":[2422,2419,2418,2417,2412,2411,2409,2399,2396,2389,2384,2382,2372,2371,2364,2357,2355],"waiting":[2429,2426,2421,2416,2414,2413,2407,2405,2390,2387,2381,2379,2373,2369,2367,2361,2354]}},"starter":{"counts":{"available":0,"claimed":0,"in-progress":9,"stale":0},"helpWantedAvailable":0,"issues":[{"n":2311,"title":"Replace OSSindex with new Sonatype Guide","state":"in-progress","label":"beginner","createdAt":"2026-05-25T18:24:33Z","updatedAt":"2026-05-25T18:24:33Z"},{"n":1315,"title":"Add data in CSAF format from https://github.com/cisagov/CSAF ","state":"in-progress","label":"beginner","createdAt":"2023-10-03T09:59:03Z","updatedAt":"2026-07-26T13:53:07Z"},{"n":1039,"title":"Ingest github ecosystems","state":"in-progress","label":"beginner","createdAt":"2022-12-08T17:38:37Z","updatedAt":"2024-10-15T13:00:46Z"},{"n":591,"title":"Use centralized function/objects for all network access ","state":"in-progress","label":"beginner","createdAt":"2022-01-24T18:37:46Z","updatedAt":"2022-11-21T20:41:09Z"},{"n":586,"title":"Track Apache Log4j advisories ","state":"in-progress","label":"beginner","createdAt":"2021-12-19T18:33:03Z","updatedAt":"2024-12-17T15:46:53Z"},{"n":517,"title":"Add tests for Docker","state":"in-progress","label":"beginner","createdAt":"2021-07-28T19:10:10Z","updatedAt":"2026-02-22T16:39:11Z"},{"n":513,"title":"Add Docker labels","state":"in-progress","label":"beginner","createdAt":"2021-07-27T13:29:35Z","updatedAt":"2026-02-25T09:47:46Z"},{"n":509,"title":"Collect Alpine vulnerability data from APKBUILD comments","state":"in-progress","label":"beginner","createdAt":"2021-07-21T10:18:26Z","updatedAt":"2025-12-16T10:58:07Z"},{"n":410,"title":"Vulnerablecode useragent","state":"in-progress","label":"beginner","createdAt":"2021-03-29T11:04:44Z","updatedAt":"2026-02-25T09:49:55Z"}]},"responseWindow":{"hours":[0,0,0,0,0,0,0,0,2,3,0,1,2,1,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,2,0,0,2,0,3,0,1,0,0,0,1,0,1,0,0,0,0,0,0,3,0,0,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,0,1,1,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,1,0,0],"people":4,"replies":37},"activeMaintainers":6},"series":[{"week":"2025-10-12","opened":0,"merged":0,"answered7d":0,"activity":0},{"week":"2025-10-19","opened":0,"merged":0,"answered7d":0,"activity":3},{"week":"2025-10-26","opened":0,"merged":0,"answered7d":0,"activity":2},{"week":"2025-11-02","opened":0,"merged":0,"answered7d":0,"activity":3},{"week":"2025-11-09","opened":0,"merged":0,"answered7d":0,"activity":5},{"week":"2025-11-16","opened":2,"merged":0,"answered7d":2,"activity":7},{"week":"2025-11-23","opened":4,"merged":1,"answered7d":2,"activity":8},{"week":"2025-11-30","opened":2,"merged":0,"answered7d":0,"activity":8},{"week":"2025-12-07","opened":1,"merged":0,"answered7d":1,"activity":2},{"week":"2025-12-14","opened":6,"merged":1,"answered7d":0,"activity":10},{"week":"2025-12-21","opened":5,"merged":1,"answered7d":1,"activity":7},{"week":"2025-12-28","opened":6,"merged":2,"answered7d":2,"activity":14},{"week":"2026-01-04","opened":2,"merged":1,"answered7d":1,"activity":12},{"week":"2026-01-11","opened":2,"merged":0,"answered7d":2,"activity":12},{"week":"2026-01-18","opened":2,"merged":0,"answered7d":2,"activity":14},{"week":"2026-01-25","opened":2,"merged":1,"answered7d":1,"activity":13},{"week":"2026-02-01","opened":6,"merged":1,"answered7d":1,"activity":15},{"week":"2026-02-08","opened":5,"merged":4,"answered7d":1,"activity":10},{"week":"2026-02-15","opened":12,"merged":5,"answered7d":2,"activity":29},{"week":"2026-02-22","opened":1,"merged":0,"answered7d":0,"activity":7},{"week":"2026-03-01","opened":7,"merged":1,"answered7d":3,"activity":12},{"week":"2026-03-08","opened":14,"merged":2,"answered7d":3,"activity":28},{"week":"2026-03-15","opened":7,"merged":0,"answered7d":2,"activity":15},{"week":"2026-03-22","opened":7,"merged":0,"answered7d":2,"activity":9},{"week":"2026-03-29","opened":6,"merged":1,"answered7d":1,"activity":10},{"week":"2026-04-05","opened":1,"merged":0,"answered7d":0,"activity":13},{"week":"2026-04-12","opened":2,"merged":2,"answered7d":0,"activity":9},{"week":"2026-04-19","opened":0,"merged":0,"answered7d":0,"activity":4},{"week":"2026-04-26","opened":2,"merged":2,"answered7d":0,"activity":11},{"week":"2026-05-03","opened":1,"merged":1,"answered7d":0,"activity":2},{"week":"2026-05-10","opened":0,"merged":0,"answered7d":0,"activity":4},{"week":"2026-05-17","opened":1,"merged":1,"answered7d":0,"activity":2},{"week":"2026-05-24","opened":1,"merged":0,"answered7d":0,"activity":3},{"week":"2026-05-31","opened":0,"merged":0,"answered7d":0,"activity":0},{"week":"2026-06-07","opened":4,"merged":3,"answered7d":0,"activity":5},{"week":"2026-06-14","opened":7,"merged":7,"answered7d":0,"activity":13},{"week":"2026-06-21","opened":1,"merged":0,"answered7d":0,"activity":1},{"week":"2026-06-28","opened":3,"merged":3,"answered7d":0,"activity":7},{"week":"2026-07-05","opened":2,"merged":2,"answered7d":0,"activity":4},{"week":"2026-07-12","opened":3,"merged":0,"answered7d":3,"activity":10},{"week":"2026-07-19","opened":3,"merged":0,"answered7d":0,"activity":7},{"week":"2026-07-26","opened":5,"merged":1,"answered7d":1,"activity":9},{"week":"2026-08-02","opened":0,"merged":0,"answered7d":0,"activity":7},{"week":"2026-08-09","opened":1,"merged":0,"answered7d":0,"activity":2},{"week":"2026-08-16","opened":0,"merged":0,"answered7d":0,"activity":4},{"week":"2026-08-23","opened":3,"merged":0,"answered7d":1,"activity":4},{"week":"2026-08-30","opened":1,"merged":0,"answered7d":0,"activity":8},{"week":"2026-09-06","opened":0,"merged":0,"answered7d":0,"activity":2},{"week":"2026-09-13","opened":2,"merged":0,"answered7d":0,"activity":6},{"week":"2026-09-20","opened":1,"merged":0,"answered7d":0,"activity":3},{"week":"2026-09-27","opened":3,"merged":0,"answered7d":0,"activity":7},{"week":"2026-10-04","opened":3,"merged":0,"answered7d":0,"activity":7}],"trend":{"flag":"unknown","recentMedianHours":null,"previousMedianHours":null,"recentN":9,"previousN":4,"openedThisWeek":3,"openedLastWeek":3},"programs":[{"program":"gsoc","slug":"aboutcode","name":"AboutCode","years":[2024,2025,2026]}]}