Applying machine intelligence to GitHub security alerts
Oct 9, 2018Ben Thompson

Summary
Introduces a machine learning model to identify potential security vulnerabilities in package dependencies by analyzing commit messages and diffs. The model filters commits related to security upgrades and identifies packages that may require alerts but lack CVE coverage. Human review of model output is maintained for quality assurance.