`def is_vuln` is Ruby style if no args