customers since, by definition, it fails to discover a broad set of weaknesses. However, with the CCR, the tool provider
could supply a CCR document for that tool, clearly setting expectations as to the set of weaknesses that the tool attempts
to discover. Tool consumers could then evaluate tools based on what specific CWE-identified weaknesses those tools
claim to discover and how that coverage fits within their needs, rather than comparing it to the entire set of CWE-defined