The project is intentionally practical rather than leaderboard-first. It keeps a checked-in vulnerability dataset, materializes vulnerable source files from public Git repositories, runs an AI agent ...