name: "Component Vulnerability Analysis"
category: assessment  # Current state: shows today's vulnerability posture regardless of time period
template: "component_vulnerability_analysis.html"
description: "Comprehensive analysis of component risks showing both individual project risk and portfolio-wide impact with advanced visualizations."
execution_order: 20  # Reuses cached scans from Scan Analysis
auto_run: false  # Run explicitly with --recipe when needed

parameters:
  pareto_chart_limit: 20

query:
  endpoint: "/public/v0/findings"
  params:
    limit: 10000

transform_function: component_vulnerability_analysis_pandas_transform

output:
  table: true
  formats:
    - csv
    - xlsx
    - html
    - md
  charts:
    - name: pareto_chart
      chart: pareto
      title: "Top Risk Components - Pareto Analysis"
      description: "Components sorted by composite risk score with cumulative risk percentage. Shows which components contribute disproportionately to total risk."
      x_column: name
      y_column: portfolio_composite_risk
      cumulative_column: cumulative_percentage
    - name: bubble_matrix
      chart: bubble
      title: "Component Risk vs Project Scope"
      description: "Bubble chart showing composite risk score vs number of affected projects. Bubble size represents finding count."
      x_column: project_count
      y_column: portfolio_composite_risk
      size_column: findings_count
      label_column: name 