libsqlite3-0 risk index should be 8 not 6 about census HOT 3 CLOSED

Hello,

Please note: we are not yet including Dependencies, Patches and ABRT crash statistics into the risk index. These are suggested but are not implemented yet [1].

CVEs are not being captured because all are recent (post-April 2015). I believe results.csv shows data from March-April. Rerunning the script will reflect latest CVEs and scores. And we are using [2] to source CVEs.

[1] https://www.coreinfrastructure.org/programs/census-project
[2] https://security-tracker.debian.org/tracker/source-package/sqlite3

from census.

I suggest closing this issue, partly because we've shown in the previous responses that we don't use ABRT etc., and partly from the resolution of issue #29 . In particular, the new version of the tool will show each portion of the calculated score, making it MUCH easier to see why scores ended up a certain way.

from census.

thanks

from census.