Research Data and Code for "Patch Now or Wait? The Value of Waiting for Exploit Forecasts in Vulnerability Management"

Code, result files with their run records, and the dated protocol records behind the article "Patch Now or Wait? The Value of Waiting for Exploit Forecasts in Vulnerability Management". The package rebuilds every table and number of the article from the stored results. The protocol records restate the protocol and its amendments with their original dates; they were deposited after the tests were run and are a dated record, not a registration. The daily EPSS score files and the CISA Known Exploited Vulnerabilities catalogue are not redistributed; the README gives their public sources, the pinned catalogue commit and the checksums needed to verify the exact inputs.