# VulGuard: An Unified Tool for Evaluating Just-In-Time Vulnerability Prediction Models

arXiv: https://arxiv.org/abs/2507.16685 · HTML: https://mlsanity.com/paper/2507.16685/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 22 Jul 2025.

## Built on by (most cited first, 1 of 1)

- [Athena: Vulnerability-Affected Library Identification via Knowledge Graph Completion](https://mlsanity.com/paper/2609.01187/) (2026)

## Abstract (arXiv)

We present VulGuard, an automated tool designed to streamline the extraction, processing, and analysis of commits from GitHub repositories for Just-In-Time vulnerability prediction (JIT-VP) research. VulGuard automatically mines commit histories, extracts fine-grained code changes, commit messages, and software engineering metrics, and formats them for downstream analysis. In addition, it integrates several state-of-the-art vulnerability prediction models, allowing researchers to train, evaluate, and compare models with minimal setup. By supporting both repository-scale mining and model-level experimentation within a unified framework, VulGuard addresses key challenges in reproducibility and scalability in software security research. VulGuard can also be easily integrated into the CI/CD pipeline. We demonstrate the effectiveness of the tool in two influential open-source projects, FFmpeg and the Linux kernel, highlighting its potential to accelerate real-world JIT-VP research and promote standardized benchmarking. A demo video is available at: https://youtu.be/j96096-pxbs