Choose the ratio of how many data sources should report the software as affected out of all data sources tracking the vulnerability ().