Resurrecting DWF

So one major aspect of this is the quality of data. For example a security vulnerability with a trivial reproducer like the ping of death, well yeah, that's an issue. But what about "Closed source foo crashes during bad TLS handshake"... er... ok.. maybe? Can we have the producer? With OpenSource a lot of this boils down to "function() has a vuln in X, see here in line Y" which makes it trivial to verify, and more often than not the project has already replied with a "yup, that's a vuln", a great example of this is CVE-2021-1000000 with https://github.com/gpac/gpac/issues/1485 as a source, and "fixed, thanks for the report". Basically, it boils down to the quality of data followed by the trust level of the reporter (e.g. if taviso says it's a vuln, it's a vuln) followed by actually spending time validating it, Luckily for most OpenSource vulnerabilities, it's pretty easy.