In this paper, we present a classifier that can identify po­tentially vulnerable commits with a significantly lower false­positive rate while retain high recall rates.
unlike most existing tools for vulnerability finding, we don t focus solely on code metrics, but also leverage the rich metadata contained in code repositories.