1. A processor-executed method for providing a predictive model of code vulnerability, the method comprising: receiving a defect for a feature, the defect having been tagged with a plurality of attributes; assigning a value to each of the attributes; establishing a mapping of the defect and the feature based on the tags; storing codes implementing a fix for the defect in directories, wherein the code directories are structured to indicate features of the fix; adding to the mapping an association of the feature and the fix derived from the code directories; decomposing the feature to sub-features; adding an association of the feature and the sub-features to the mapping; calculating an individual value for each of the sub-features as a function of the values assigned to attributes of defects associated with the sub-features derived from the mapping; calculating an overall value for the feature as a function of the individual value for each of the sub-features; and storing a plurality of rules for calculating the individual and overall values, wherein a first rule assigns an impact value to the defect based on a number of customers affected by the defect.