VULNBUMP

Summary from the TLDR InfoSec newsletter

VulnBump is a benchmark for vulnerability-driven dependency upgrades in real, runnable repositories.