Skip to content

ML Application · Python

patch-sloth

A second opinion on CNA-only CVSS scores for the CVEs in your lockfile (DEV Hacktoberfest 2026)

What it is

Patch Sloth is an end-to-end machine learning application that scans lockfiles for deferred CVEs and provides a second-opinion severity score using fine-tuned LLMs and TabPFN models, accompanied by a CLI, API, and deployment instructions.

Scored at58848779 Nov 2026Changes since

Merit describes the code at this commit. Later pushes count once the owner rescans. How merit is scored

Where it counts

  • Machine Learning90%
  • NLP & LLMs80%
  • Data Science70%
  • MLOps50%

How much of the project is about each field, as scoring counts it. It ranks in the field it is most about.

What the judge found

Read from the project's code at its scored commit.

Strengths3

  • End-to-end machine learning application solving a real-world problem in vulnerability management.
  • Well-documented with clear reproduction steps and available results.
  • Modular design with CLI, API, and Dockerfile for flexible usage and deployment.

Limitations

The owner keeps this project's limitations private.

Around it on the Machine Learning board

Whole board
  1. 65, shared rankai_chat_distil_01ML Application · HTML54.3/100ImplementationJarad Peckenpaugh
  2. 65, shared rankJanek-WangratEducational Implementation · Jupyter Notebook54.3/100Implementationjanwan2003
  3. 65, shared rankpatch-slothML Application · Python54.3/100ImplementationMohammad Ahmadullah Khan
  4. 68CCC_2026_DATA-AIArchitecture Reimplementation · Python53.8/100ImplementationPop Alexandru
  5. 69Pinrin-AIML Application · Python53.5/100ImplementationIrine Milton

More from Mohammad Ahmadullah Khan