gib. Vulnerability research, mostly – what a bug actually does versus what the number says it does.
The work is in CVEs and Reference. How the ratings work is in the verdict scale. How the site is put together, and why its a wiki instead of a blog, is in the colophon.
Spelling and grammatical errors are mine and Im keeping them.