Struct VulnerabilityMetrics 

pub struct VulnerabilityMetrics {
    pub components_with_vulns: usize,
    pub total_vulnerabilities: usize,
    pub with_cvss: usize,
    pub with_cwe: usize,
    pub with_remediation: usize,
    pub with_vex_status: usize,
}

Vulnerability information quality metrics

Fields

components_with_vulns: usize

Components with vulnerability information

total_vulnerabilities: usize

Total vulnerabilities reported

with_cvss: usize

Vulnerabilities with CVSS scores

with_cwe: usize

Vulnerabilities with CWE information

with_remediation: usize

Vulnerabilities with remediation info

with_vex_status: usize

Components with VEX status

Implementations

impl VulnerabilityMetrics

pub fn from_sbom(sbom: &NormalizedSbom) -> Self

Calculate vulnerability metrics from an SBOM

pub fn documentation_score(&self) -> Option<f32>

Calculate vulnerability documentation quality score (0-100)

Returns None when no vulnerability data exists, signaling that this category should be excluded from the weighted score (N/A-aware). This prevents inflating the overall score when vulnerability assessment was not performed.

Disclosing vulnerabilities at all earns a 40-point baseline; the remaining 60 points reward per-vulnerability documentation quality (CVSS 24, CWE 18, remediation 18). Without the baseline, a bare disclosure scored 0 — LOWER than saying nothing (N/A redistributes the category weight), which punished transparency: an author was better off stripping vulnerability data than disclosing it undocumented.

Trait Implementations

impl Clone for VulnerabilityMetrics

fn clone(&self) -> VulnerabilityMetrics

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VulnerabilityMetrics

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for VulnerabilityMetrics

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for VulnerabilityMetrics

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.