Open source vulnerability remediation tool

A remediation computer comprising:

• a processor;
• and
• a computer readable medium comprising code, executable by the processor, for implementing a method comprising:
• a) receiving a candidate application that uses a plurality of code libraries;
• b) receiving information regarding known library vulnerabilities;
• c) identifying one or more libraries in the plurality of code libraries that are vulnerable based upon the information;
• d) for each of the one or more vulnerable libraries:
• i) determining a library version that minimizes risk;
• ii) incorporating the determined library version that minimizes risk into the candidate application to form a test application;
• iii) performing an application test on the test application;
• iv) if an application test score on the test application, that incorporates the determined library version that minimizes risk, is below a predetermined threshold, then incorporating the determined library version that minimizes risk into a final application precursor;
• and
• e) determining, in response to d), a final application.