Are Source Code Metrics "Good Enough" in Predicting Security Vulnerabilities? - Sundarakrishnan Ganesh; Francis Palma; Tobias Olsson (Data, 2022)