It is a vulnerability database and triage infrastructure for open source projects aimed at helping both open source maintainers and consumers of open source.