use-security-risk 0.0.1

Cybersecurity risk metadata primitives for RustUse
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

# use-security-risk

Generic cybersecurity risk primitives for `RustUse`.

## Experimental

`use-security-risk` is experimental while the `use-security` workspace remains below `0.3.0`. Expect small API adjustments during the first release wave.

## Example

```rust
use use_security_risk::{RiskImpact, RiskLikelihood, RiskPriority, priority_from_likelihood_impact};

let priority = priority_from_likelihood_impact(RiskLikelihood::Likely, RiskImpact::Major);

assert_eq!(priority, RiskPriority::P1);
assert!(priority.sort_key() < RiskPriority::P3.sort_key());
```

## Scope

- Cybersecurity risk identifiers, categories, severities, likelihoods, impacts, treatments, owners, statuses, and priorities.
- Small label and sorting helpers.
- Lightweight risk metadata models for local application code.

## Non-goals

- A GRC platform.
- Risk workflow automation.
- Compliance scoring or policy enforcement.

## License

Licensed under either of the following, at your option:

- Apache License, Version 2.0
- MIT license