Verified with findings
A listing that passed verification with issues recorded and published.
It is a first-class result rather than a failure. Software of any size accumulates dependency advisories, and a badge that only ever said pass would train people to stop reading it.
Each finding carries a severity and, where it can be determined, whether the affected code path is one the listing actually uses.
It is the state most honest software is in, and displaying it as information rather than as failure is what stops makers hiding things.
Reading severity without reachability. A critical advisory in code that never runs matters less than a medium one in the request handler.
Related terms
See Verified with findings on a real listing
Every term here shows up in the catalogue next to a real result, with the findings published and the limits stated. Free to browse, no account needed.
Open the catalogue