Status dictionary
This collects the meaning of the status indicators and badges that appear throughout the app. For word definitions, see the Glossary; for how concepts relate, see Core concepts and terms.
Scan status
The progress status of a single scan run.
- Not run Not yet scanned (not measured). Shown in coverage as "what has not been checked."
- In progress Scan running. It runs asynchronously and continues even if you close the window.
- Completed Scan complete. A result snapshot is kept.
- Failed Scan failed. A retry is needed.
Finding handling status
The handling status of a single finding. Vulinder simplifies closure into two options: false positive and accepted risk.
- open : not yet handled.
- false positive : suppressed as not a real risk. Kept permanently by fingerprint.
- accepted risk : the risk is acknowledged but not remediated for now.
- resolved : remediated and no longer detected.
- Recurred An unremediated item is detected again in a rescan.
Severity · priority
The risk level of a finding. Shown with 6 fixed-color levels.
CRITICAL HIGH MEDIUM LOW INFO- KEV A vulnerability confirmed to be actively exploited. It is a separate axis from severity; at the same severity, handle KEV items first.
License risk
The SBOM · License screen shows the license risk of each component.
- Copyleft Distribution-condition caution (GPL, AGPL, etc.). Requires review for commercial distribution.
- Unknown The license could not be identified.
- Permissive Generally low risk (MIT, Apache-2.0, etc.).