"Audit Vulnerabilities" and DREAD criteria

[exoosh]

Hi,

while DependencyTrack is meant to be about dependency tracking and providing an overview of vulnerabilities it'd be cool if the "Audit Vulnerabilities" tab had the option to assess the item by the DREAD method usually employed for threat models.

Of course it could be done in the text field as well, but then it would be harder to extract that data again.

Just an idea.

PS: when trying to open a new ticket there is a link to a Slack space and a message saying "Our Slack channel is the best way to get in touch!". But the space requires that you have an email address with one of two OWASP domains. Found that strange ...