The Evolution and Decay of Statically Detected Source Code Vulnerabilities