Create Reference document to explain Risk in detail

[DennisClark]

Various AboutCode applications (such as DejaCode) depend (or will depend) on the Risk value calculated by VulnerableCode. The details of that calculation, both the how and the why, need to be explained in a Reference document in ReadTheDocs format.

I am volunteering to work on that but I will most likely need input from other members of the team.

This is critical for the five-c (5C: Continuous Code Compliance Control Center) project.

[DennisClark]

I think that in https://dejacode.readthedocs.io/en/latest/reference-vulnerability-management.html# Section "4. Understanding Vulnerability Fields" that we already have a pretty good explanation of Risk and the related fields, although it is not explicitly stated that the values are produced by VulnerableCode. A bit more explanation might be helpful.