Machine-learning and data-mining approaches have been proposed by several authors for finding vulnerabilities.
unlike most existing tools for vulnerability finding, we don't focus solely on code metrics, but also leverage the rich metadata contained in code repositories.