Managing a database of vulnerabilities for apackage system: the pkgsrc study case.