proposed metric for detecting the lifecycle of security fixes
metric to track the lifecycle of a patch/fix