https://dfarq.homeip.net/vulnerability-management-metrics/