UNPKG

ssvc

Version:

TypeScript implementation of SSVC (Stakeholder-Specific Vulnerability Categorization). A prioritization framework to triage CVE vulnerabilities as an alternative or compliment to CVSS

58 lines (38 loc) 804 B
# Coordinator Publication CERT/CC Coordinator Publication Decision Model **Version:** 1.0 ## Decision Tree ```mermaid flowchart TD ``` ## Enums ### SupplierInvolvementLevel - fix_ready - cooperative - uncooperative_unresponsive ### ExploitationStatus - none - public_poc - active ### PublicValueAddedLevel - limited - ampliative - precedence ### ActionType - publish - dont_publish ### DecisionPriorityLevel - low - high ## Priority Mapping - **publish** → high - **dont_publish** → low ## Usage ```typescript import { DecisionCoordinatorPublication } from './plugins/coordinator_publication'; const decision = new DecisionCoordinatorPublication({ // Add parameters based on methodology }); const outcome = decision.evaluate(); console.log(outcome.action, outcome.priority); ```