PatchRisk: Forecasting Future Vulnerability Exposure in Open-Source Dependency Networks
PatchRisk is constructed, a leakage-aware benchmark from Open Source Vulnerability advisories and deps.dev dependency graphs for npm and PyPI that improves AUPRC over the strongest TimeOnly baseline and remains stable across smaller scales and package-group shuffle robustness tests.