from a large dropdown menu during CVE refinement, but also
(2) our work in the Common Weakness Enumeration (CWE) is
producing hundreds of vuln types, and we want that to become
a little more stable before doing the next round of modifications