Auditing, CVEs, licensing