Labeled vulnerability-package match pairs used as ground truth to evaluate vulnerability scanners - View it on GitHub